Latest

Cybercrime

Would-Be Software Pirates Served Malware Through 'NullMixer'

Prajeet Nair  •  September 27, 2022

A new malware dropper uncovered by Kaspersky targets would-be users of pirated software with a slew of nasty infections including backdoors, Trojan-Banker programs, downloaders, spyware and more. The cybersecurity company calls the dropper "NullMixer."

Governance & Risk Management

California Restricts Sharing Abortion Data With Other States

Marianne Kolbasuk McGee  •  September 27, 2022

California Gov. Gavin Newsom on Tuesday signed into law two bills containing privacy protections for information related to reproductive health and abortion, in the wake of the Supreme Court's ruling overturning Roe v. Wade. Other states may follow suit.

Governance & Risk Management

FDA Authorization Bill Drops Medical Device Cybersecurity

Marianne Kolbasuk McGee  •  September 27, 2022

A congressional deal will ensure the U.S. Food and Drug Administration can continue collecting fees from medical device manufacturers but at the price of dropping increased cybersecurity mandates for the industry. Requiring manufacturers to patch devices had bipartisan support.

Cybercrime

Chilean Court System Hit With Ransomware Attack

Mihir Bagwe  •  September 27, 2022

A phishing email led to the spread of the Cryptolocker Trojan inside the court system of Chile, adding to a growing list of cyber disruptions affecting the South American country. Court officials stressed that the virus was contained before it could disrupt judicial proceedings.

Fraud Management & Cybercrime

LockBit Publishes Stolen Data as Hospital Rejects Extortion

Mihir Bagwe  •  September 26, 2022

Ransomware hackers made good on a threat to publish patient and staff data stolen from a French hospital after administrators said they refused on principal to pay out. François Braun, French minister of social affairs and health, said that the government will "not give in to these criminals."

Governance & Risk Management

OT Security Shorted by Nuclear Weapon Oversight Agency

Prajeet Nair  •  September 26, 2022

The U.S. federal agency responsible for the ongoing functionality of the nuclear weapons stockpile hasn't gotten its arms around how to secure operational technology, says the Government Accountability Office. More than 200,000 unique pieces of OT are deployed across nuclear weapon centers.

Cyberwarfare / Nation-State Attacks

Feds: Chinese Hacking Group Undeterred by Indictment

Marianne Kolbasuk McGee  •  September 26, 2022

Two federal indictments against APT41, a Chinese state-sponsored hacking group, haven't slowed down its operations, the U.S. government acknowledges in a warning telling the healthcare sector to be vigilant about the threat actor. The hackers are believed to be at large, likely in China.

►

Finance & Banking

Assessing Growing Cyberthreats to Africa's Financial Sector

Anna Delaney  •  September 26, 2022

Financial services firms in Africa are becoming bigger cyber targets as they expand into new mobile payment and financial inclusion products. Rob Dartnall of Security Alliance explains why these firms need to invest in information sharing, training and new cybersecurity practices to avoid breaches.

Cybercrime

Metador Threat Group Targets Telcos, ISPs and Universities

Prajeet Nair  •  September 24, 2022

Researchers uncovered a never-before-seen advanced threat actor dubbed Metador targeting telecommunications, internet service providers and universities in several countries in the Middle East and Africa for cyberespionage. They found two different Windows-based malware platforms.

Business Email Compromise (BEC)

HHS HC3 Warns Health Sector of Monkeypox Phishing Schemes

Marianne Kolbasuk McGee  •  September 23, 2022

Scammers are taking advantage of the monkeypox virus outbreak to launch phishing campaigns targeting healthcare providers and public health organizations to harvest credentials, the Department of Health and Human Services' Health Sector Cybersecurity Coordination Center says.

Business Email Compromise (BEC)

Sweepstakes Spam Hackers Used Microsoft Infrastructure

Prajeet Nair  •  September 23, 2022

Hackers behind a campaign of deceptive sweepstakes spam hacked their way into Azure cloud accounts that lacked multifactor authentication and obtained admin privileges for Exchange servers. Microsoft advises turning on MFA and other measures such as conditional access.

►

Multi-factor & Risk-based Authentication

ISMG Editors: How a Teen's Hack of Uber Adds to MFA Crisis

Anna Delaney  •  September 23, 2022

In the latest weekly update, ISMG editors discuss the industrywide implications of a teenager hacking into Uber's internal systems, key trends in the new Gartner SD-WAN Magic Quadrant report, and how ethics and security culture are center stage due to recent CISO revelations at Uber and Twitter.