Cyberattackers Now Also Make Linux Versions of Their Ransomware

“Security firm Kaspersky said Friday that it discovered a Linux version of the RansomEXX ransomware,” reports ZDNet, “marking the first time a major Windows ransomware strain has been ported to Linux to aid in targeted intrusions.” RansomEXX is a relatively new ransomware strain that was first spotted earlier this year in June. The ransomware has been used in attacks against the…

Russian Hackers Targeted California, Indiana Democratic Parties In Repeat of 2016 Attacks

An anonymous reader quotes a report from Reuters: The group of Russian hackers accused of meddling in the 2016 U.S. presidential election earlier this year targeted the email accounts of Democratic state parties in California and Indiana, and influential think tanks in Washington and New York, according to people with knowledge of the matter. The attempted intrusions, many of which were…

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

Brian Krebs: In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents…

Russians Who Pose Election Threat Have Hacked Nuclear Plants and Power Grid

The New York Times reports:
Cybersecurity officials watched with growing alarm in September as Russian state hackers started prowling around dozens of American state and local government computer systems just two months before the election. The act itself did not worry them so much — officials anticipated that the Russians who interfered in the 2016 election would be back — but the…

National Guard Called In To Thwart Cyberattack in Louisiana Weeks Before Election

The Louisiana National Guard was called in to stop a series of cyberattacks aimed at small government offices across the state in recent weeks, Reuters reported Friday, citing two people with knowledge of the events, highlighting the cyber threat facing local governments in the run up to the 2020 U.S. presidential election. From the report: The situation in Louisiana follows a…

EU Sanctions Russia Over 2015 German Parliament Hack

The European Union has imposed sanctions today against Russia for its involvement in the 2015 German Parliament (Bundestag) hack. From a report: Sanctions were levied against the GRU (Russian Main Intelligence Directorate), a military intelligence agency part of the Russian Army, and two of its officers. The two GRU officers were identified as Dmitry Badin and Igor Kostyukov. EU officials said…

The Forklift Truck Drivers Who Never Leave Their Desks

Forklift operators are using remote-control technology that allows them to work off-site, controlling their machines from afar. The BBC reports: [A]s Covid-19 spreads easily, the warehouses dotted along the world’s supply chains have become potential hubs of disease transmission, says Elliot Katz, co-founder of Phantom Auto. Phantom Auto’s technology is now installed in around a dozen warehouses in the US and…

Microsoft Says It Took Down 94% of TrickBot’s Command and Control Servers

TrickBot survived an initial takedown attempt, but Microsoft and its partners are countering TrickBot operators after every move, taking down any new infrastructure the group is attempting to bring up online. From a report: Last week, a coalition of cyber-security firms led by Microsoft orchestrated a global takedown against TrickBot, one of today’s largest malware botnets and cybercrime operations. Even if…

Mysterious Hackers Donating Stolen Money

A hacking group is donating stolen money to charity in what is seen as a mysterious first for cyber-crime that’s puzzling experts. smooth wombat writes: Darkside hackers claim to have extorted millions of dollars from companies, but say they now want to “make the world a better place.” In a post on the dark web, the gang posted receipts for $10,000…

Seven Mobile Browsers Vulnerable To Address Bar Spoofing Attacks

In a report published today by cyber-security firm Rapid7, the company said it worked with Pakistani security researcher Rafay Baloch to disclose ten new address bar spoofing vulnerabilities across seven mobile browser apps. From a report: Impacted browsers include big names like Apple Safari, Opera Touch, and Opera Mini, but also niche apps like Bolt, RITS, UC Browser, and Yandex Browser….