Latest Cybersecurity News and Articles

---

SpyNote Android Spyware Poses as Legit Crypto Wallets, Steals Funds

Android users are advised to be cautious of applications requesting Accessibility API access, particularly those claiming to be crypto wallets, PDF readers, and video players.

---

North Korean Hackers Now Launder Stolen Crypto via YoMix Tumbler

YoMix saw a significant increase in funds in 2023, with about one-third of inflows originating from wallets associated with crypto hacks, demonstrating the adaptability of sophisticated threat actors.

---

Volt Typhoon Hits Multiple Electric Utilities, Expands Cyber Activity

The Voltzite threat, a subset of China's Volt Typhoon APT, has been actively targeting US electric companies and African electric transmission and distribution organizations, with the intent to compromise physical industrial control systems.

---

Hackers Exploit EU Agenda in Spear Phishing Campaigns

Organizations based in the EU are being targeted by spear phishing campaigns leveraging EU political and diplomatic events, according to the bloc’s Computer Emergency Response Team (CERT-EU).

---

Washington County Pays $350,000 Ransom After Cyberattack

The Washington County Board of Commissioners voted to pay a $350,000 ransom to Russian cybercriminals after a cyberattack shut down county services. The decision was made in an emergency meeting due to the deadline set by the hackers.

---

To Avoid Bankruptcy, EMR Firm Settles Lawsuit for $4M

The settlement includes options for affected individuals such as identity theft monitoring, reimbursement for losses, or a flat fee cash payment, with attorneys seeking about one-third of the settlement fund in fees.

---

CISA Adds Microsoft Windows Bugs to Its Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two Microsoft Windows vulnerabilities to its list of Known Exploited Vulnerabilities. These flaws, CVE-2024-21412 and CVE-2024-21351, are actively being exploited in the wild.

---

Zeus, IcedID Malware Gangs Leader Pleads Guilty, Faces 40 Years in Prison

Vyacheslav Igorevich Penchukov, a Ukrainian cybercriminal, pleaded guilty to leading the Zeus and IcedID malware groups, involved in stealing millions of dollars and attacking a major hospital with ransomware.

---

Russia Continues to Focus on Cyber Operations and Espionage

Russia continues to target Ukraine with cyber operations and espionage to gain an edge in the ongoing ground campaign, focusing on supply chain disruption and information gathering.

---

CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched security flaw impacting Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it's being likely exploited in Akira ransomware attacks. The vulnerability in question is 

---

FTC Wants to Crack Down on AI Impersonation of Individuals

The FTC has finalized a new rule to combat AI-driven impersonation fraud targeting government and businesses. The rule allows it to take legal action to recover proceeds from scams and is now being considered for extension to protect individuals.

---

Google Calls for Framework Giving AI Access to Incident Data

The company emphasized the need to shift from AI being an assistive technology to becoming an autonomous one, and highlighted the importance of controlling access to incident data for training AI systems.

---

Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries

Multiple security flaws, including actively exploited vulnerabilities and weaknesses in the Integrity Checker Tool, have been discovered, highlighting the need for enhanced visibility and validation of digital supply chains in enterprise products.

---

Report: Crypto-Money Laundering Records 30% Annual Decline

In 2023, around $22bn of cryptocurrency was laundered, marking a 30% decrease from 2022, according to Chainalysis. Nefarious actors adapted their techniques to avoid detection, with a shift towards using new mixers and cross-chain bridges.

---

RustDoor macOS Backdoor Targets Cryptocurrency Firms with Fake Job Offers

Several companies operating in the cryptocurrency sector are the target of a newly discovered Apple macOS backdoor codenamed RustDoor. RustDoor was first documented by Bitdefender last week, describing it as a Rust-based malware capable of harvesting and uploading files, as well as gathering information about the infected machines. It's distributed by masquerading itself as a Visual

---

U.S. State Government Network Breached via Former Employee's Account

The breach occurred when a former employee's administrator account was used to access the network environment. The threat actor gained access to sensitive information and posted it on the dark web.

---

US State Department Puts $10M Bounty on ALPHV Ransomware Group

The US State Department has announced a reward of up to $10 million for information on the leaders of the AlphV ransomware group, with an additional $5 million for details leading to the arrest of those involved in attacks.

---

RansomHouse Gang Automates VMware ESXi Attacks with New MrAgent Tool

The MrAgent tool is designed to disable firewalls, automate ransomware deployment, and execute local commands on hypervisors, maximizing the impact of the attack while minimizing the chances of detection and intervention.

---

FTC Says It Will Go After Companies That ‘Quietly’ Change Privacy Policies to Mine User Data for AI

The Federal Trade Commission (FTC) will strictly enforce data privacy laws and pursue companies that surreptitiously change their terms of service to exploit consumer data for AI development.

---

Unpacking North Korea's Gambling Web Service

South Korea's National Intelligence Service reported that North Korea's Office 39 is selling pre-infected gambling websites to South Korean cybercrime groups. The scheme, believed to have generated billions, offers websites at $5,000/month with optional tech support for $3,000/month. The sites steal the personal data of South Korean citizens.