August 27, 2022

The Week in Ransomware – August 26th 2022 – Fighting back We saw a bit of ransomware drama this week, mostly centered around LockBit, who saw their data leak sites taken down by a DDoS attack after they started leaking the allegedly stolen Entrust data. Last week, LockBit claimed responsibility for a ransomware Read more…

DoorDash Discloses New Data Breach Tied to Twilio Hackers Food delivery firm DoorDash has disclosed a data breach exposing customer and employee data that is linked to the recent cyberattack on Twilio. In a security advisory released Thursday afternoon, DoorDash says that a threat actor gained access to the company’s internal Read more…

Atlassian Bitbucket Server Vulnerable to Critical RCE Vulnerability Atlassian has published a security advisory warning Bitbucket Server and Data Center users of a critical security flaw that attackers could leverage to execute arbitrary code on vulnerable instances. Bitbucket is a Git-based code hosting, management, and collaboration tool, with Jira and Read more…

Twilio Breach Let Hackers Gain Access to Authy 2FA Accounts Twilio’s investigation into the attack on August 4 reveals that hackers gained access to some Authy user accounts and registered unauthorized devices. Authy is a two-factor authentication (2FA) service from Twilio that allows users to secure their online accounts where the feature is Read more…

How ‘Kimsuky’ Hackers Ensure their Malware only Reach Valid Targets The North Korean ‘Kimsuky’ threat actors are going to great lengths to ensure that their malicious payloads are only downloaded by valid targets and not on the systems of security researchers. According to a Kaspersky report published today, the threat Read more…

LastPass Developer Systems Hacked to Steal Source Code Password management firm LastPass was hacked two weeks ago, enabling threat actors to steal the company’s source code and proprietary technical information. The disclosure comes after BleepingComputer learned of the breach from insiders last week and reached out to the company on Read more…

Hackers Abuse Genshin Impact Anti-cheat System to Disable Antivirus Hackers are abusing an anti-cheat system driver for the immensely popular Genshin Impact game to disable antivirus software while conducting ransomware attacks. The driver/module, “mhypro2.sys,” doesn’t need the target system to have the game installed, and it can operate independently or Read more…

Microsoft: Russian Malware Hijacks ADFS to Log in as Anyone in Windows Microsoft has discovered a new malware used by the Russian hacker group APT29 (a.k.a. NOBELIUM, Cozy Bear) that enables authentication as anyone in a compromised network. As a state-sponsored cyberespionage actor, APT29 employs the new capability to hide Read more…