Category: government

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. link: https://threatpost.com/twitter-whistleblower-tldr-version/180472/…

The North Korean APT is using a fake job posting for Coinbase in a cyberespionage campaign targeting users of both Apple and Intel-based systems. link: https://threatpost.com/apt-lazarus-macos-malware/180426/ Author: Elizabeth Montalbano

‘Summer Camp’ for hackers features a compromised satellite, a homecoming for hackers and cyberwarfare warnings. link: https://threatpost.com/black-hat-and-def-con-roundup/180409/ Author: Threatpost

Built-in Telegram and Discord services are fertile ground for storing stolen data, hosting malware and using bots for nefarious purposes. link: https://threatpost.com/messaging-apps-cybercriminals/180303/ Author: Elizabeth Montalbano

Microsoft has linked a threat that emerged in June 2021 and targets small-to-mid-sized businesses to state-sponsored actors tracked as DEV-0530. link: https://threatpost.com/h0lygh0st-ransomware-north-korea/180232/ Author: Elizabeth Montalbano

Since 2021, various state-aligned threat groups have turned up their targeting of journalists to siphon data and credentials and also track them. link: https://threatpost.com/journalists-target-apts/180224/ Author: Elizabeth Montalbano

State-sponsored actors are deploying the unique malware–which targets specific files and leaves no ransomware note–in ongoing attacks. link: https://threatpost.com/healthcare-maui-ransomware/180154/ Author: Elizabeth Montalbano

The APT is pairing a known Microsoft flaw with a malicious document to load malware that nabs credentials from Chrome, Firefox and Edge browsers. link: https://threatpost.com/fancy-bear-nuke-threat-lure/180056/ Author: Elizabeth Montalbano

The threat actor targets institutions and companies in Europe and Asia. link: https://threatpost.com/elusive-toddycat-apt-targets-microsoft-exchange-servers/180031/ Author: Sagar Tiwari

Evidence suggests that a just-discovered APT has been active since 2013. link: https://threatpost.com/apt-flew-under-radar-decade/179995/ Author: Nate Nelson