News

  As per Trend Micro’s research, since May 2019, a Russian state-sponsored notorious cyber espionage threat group called Pawn Storm (also known as Fancy Bear or APT28) has been scanning servers for reusing previously compromised emails. The compromised email addresses are used to carry out phishing campaigns, targeted mainly at defense firms from the Middle East with an intent of cyber espionage. Source: Ciso Mag  

Hospitals in Spain have been targeted with coronavirus-themed phishing lures by attackers looking to lock-down their systems with Netwalker ransomware. Local reports indicate that medical centres have been receiving emails purporting to offer "information on COVID-19", but with PDF attachments that activate the ransomware, commonly associated with computer crime groups in Eastern Europe. Source: Computing.com

MICROSOFT has warned of hackers exploiting a new vulnerability that can be found in all supported versions of Windows. If successfully manipulated by a cyber-criminal, it would be possible for them to run malware on a victim's device. Source: The Sun

A coronavirus-themed phishing campaign designed to infect victims with Raccoon information-stealing malware has reportedly been leveraging an open redirect vulnerability found on the U.S. Department of Health and Human Services’ website, HHS.gov. As defined by Trustwave here, an open redirect occurs when a website’s “parameter values (the portion of URL after “?”) in an HTTP GET request allow for information that will redirect a user to a new website without any validation of the target...

UK health chiefs are being urged to safeguard people's privacy as they develop an app to help tackle the coronavirus pandemic. An open letter published by a group of "responsible technologists" warns that if corners are cut, the public's trust in the NHS will be undermined. And it urges those in charge to be more open about their data-collection plans. Source: BBC

Twitter has emphasised that while it attempts to curb any misinformation about COVID-19, it is unable to take "enforcement action on every tweet". "As we communicated last week, COVID-19 is affecting our content moderation capacities in unique ways, and we're adjusting to meet the challenge. Right now, we're focused on content that has the highest potential of directly causing physical harm," the company tweeted. Source: ZD Net

Attackers are exploiting unpatched Windows zero day flaws, Microsoft said in a Monday security advisory. The company said “limited targeted attacks” could leverage two unpatched remote code executive (RCE) vulnerabilities in Windows “when the Windows Adobe Type Manager Library improperly handles a specially crafted multi-master font – Adobe Type 1 PostScript format.” Source: SC Magazine

 FireEye security researchers warn that the proliferation of hacking tools with capabilities for targeting industrial control systems (ICS) is lowering the entry bar for attackers and increasing risks for organizations operating in the industrial sector. In a study published today, the US cybersecurity firm said it analyzed all the hacking tools with ICS targeting capabilities that were released in recent years. Source: ZD Net

Finastra, a bank technology company in London that has more than 9,000 customers, including 90 of the top 100 global banks, was working Monday to bring servers back online that were hit by a ransomware attack late last week. Some U.S. bank customers are affected by the incident, which occurred Friday. The company says it took some of its servers offline while it investigated the incident. Source: American Banker

New data from NordVPN Teams shows a massive spike since March 11 in business VPN usage worldwide in the wake of the global coronavirus pandemic. This directly correlates with the mass increase in remote work globally. The fundamental shift in work location will have enormous ramifications on digital business, the economy, and cybersecurity. Key numbers: NordVPN Teams has seen a 165% usage spike and an almost 600%increase in sales overall. People are working longer than...