Latest Cybersecurity News and Articles

---

DBatLoader Actively Distributing Malware Targeting European Businesses

The campaign targets manufacturing companies and multiple businesses in European countries through phishing emails. The malicious payload is distributed through WordPress sites with authorized SSL certificates.

---

Exciting AI breakthroughs: Risks, distractions, new threats

In this exclusive CyberTalk interview, Global Cyber Security Strategist and Evangelist for Check Point, Edwin Doyle, provides unique and insightful perspectives pertaining to industry, innovation and what the future of AI holds. He unpacks how groundbreaking AI language models will transform the labor market, the business landscape, cyber security and so much more. Find out […] The post Exciting AI breakthroughs: Risks, distractions, new threats appeared first on CyberTalk.

---

DNV appoints Anette Roll Richardsen as Director of Cybersecurity

Anette Roll Richardsen has been appointed as Director of Cybersecurity for Norway-based DNV to safeguard against risks to critical infrastructure.

---

Three New Variants — Standard, Lite and Forked — of IcedID Malware Discovered

Security researchers at Proofpoint described the malware samples in an advisory published on Monday, which names them Standard, Lite, and Forked IcedID variants respectively.

---

Balancing security risks and innovation potential of shadow IT teams

Shadow IT teams, also known as rogue IT teams, have grown in popularity in recent years due to the rise of cloud-based apps and remote work. However, this has led to operational tension and security risks within many businesses.

---

NullMixer Includes Polymorphic Loaders to Deliver New Threats

The NullMixer package is including new polymorphic loaders by third-party MaaS and PPI service providers in the underground markets, and also pieces of controversial, potentially North-Korean-linked PseudoManuscript code.

---

Known unknowns: Refining your approach to uncategorized web traffic

You can simply block, by default, all access to all uncategorized sites. But wielding such a blunt policy instrument is likely to introduce a range of problems for users trying to access legitimate sites, and negatively affect business velocity.

---

BlackGuard Stealer Enhances its Stealth, Persistence Technique, and Scope

BlackGuard, which was first spotted in March 2022, has experienced an upgrade with several new capabilities. It added a crypto wallet hijacker module that has hardcoded addresses and support for multiple cryptocurrencies. The stealer can now propagate via USB and other removable devices to infect new hosts. Also, it can now steal data and drain crypto assets from 12 more cryptocurrency browser extensions and wallets.

---

Pakistan-Origin SideCopy Linked to New Cyberattack on India's Ministry of Defence

An advanced persistent threat (APT) group that has a track record of targeting India and Afghanistan has been linked to a new phishing campaign that delivers Action RAT. According to Cyble, which attributed the operation to SideCopy, the activity cluster is designed to target the Defence Research and Development Organization (DRDO), the research and development wing of India's Ministry of

---

Earth Preta’s Cyberespionage Campaign Hit Over 200 Organizations Since 2022

Throughout its investigation, Trend Micro observed several instances where victims were compromised by two groups simultaneously, indicating possible overlaps in collection requirements between these groups, such as Groups 724, 1358, and 5171.

---

IcedID Malware Shifts Focus from Banking Fraud to Ransomware Delivery

Multiple threat actors have been observed using two new variants of the IcedID malware in the wild with more limited functionality that removes functionality related to online banking fraud. IcedID, also known as BokBot, started off as a banking trojan in 2017. It's also capable of delivering additional malware, including ransomware. "The well-known IcedID version consists of an initial loader

---

Outlook Zero-Day Needs Quick Patching : Microsoft

A Microsoft Outlook bug has been discovered jeopardizing the security of the Microsoft 365 suite. Tagged as CVE-2023-23397, the bug enables a threat actor to access user credentials by passing along a specially crafted email package. It reportedly features a high ‘wormability’ factor with no user interaction required in most instances. The flaw affects several applications, including MS Office 2019, 2016, 2013, and LTSC. 

---

Breaking the Mold: Pen Testing Solutions That Challenge the Status Quo

Malicious actors are constantly adapting their tactics, techniques, and procedures (TTPs) to adapt to political, technological, and regulatory changes quickly. A few emerging threats that organizations of all sizes should be aware of include the following: Increased use of Artificial Intelligence and Machine Learning: Malicious actors are increasingly leveraging AI and machine learning to

---

US President Biden issues order to ban commercial spyware

US president Joe Biden on Monday issued an Executive Order on Prohibition on Use by the United States Government of Commercial Spyware that Poses Risks to National Security – a title that is not quite as simple as it seems.

---

New MacStealer macOS Malware Steals iCloud Keychain Data and Passwords

Dubbed MacStealer, it's the latest example of a threat that uses Telegram as a command-and-control (C2) platform to exfiltrate data. It primarily affects devices running macOS versions Catalina and later running on M1 and M2 CPUs.

---

Dark Power Ransomware Operation Claims 10 Victims in a Month

A new ransomware operation by the Dark Power group was spotted in the wild by cybersecurity firm Trellix. It gives victims a total of 72 hours to send $10,000 in Monero cryptocurrency to receive a working decryptor. To experts, it appears to be a private project since this operation has no traces of promotion over any hacker forums or dark web spaces. According to the leak site, there have been 10 victims so far.

---

Apple Issues Urgent Security Update for Older iOS and iPadOS Models

The update is available in versions iOS 15.7.4 and iPadOS 15.7.4 for iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation).

---

TechScape: How the world is turning against social media

France has banned not only TikTok from government phones, but Facebook and Twitter, too. Could this be a tipping point for big tech? Plus, AI-generated pictures of the pope signal a new type of viral imageDon’t get TechScape delivered to your inbox? Sign up for the full article hereGovernment workers in the UK, US, Canada and European Union (the list will have grown by the time you read this) are banned from installing TikTok on their phones.On Friday, France joined that list, preventing its civil servants from installing TikTok – and everything else. From the government’s press release (original in French):After an analysis of the issues, in particular security, the government has decided to ban the downloading and installation of recreational applications on professional telephones provided to public officials from now on.Recreational applications do not have sufficient levels of cybersecurity and data protection to be deployed on government equipment. This ban applies immediately and uniformly. Exemptions may be granted on an exceptional basis … Continue reading...

---

N.Y. law firm to pay state $200K over data breach

New York Attorney General Letitia James said Monday that midsize law firm Heidell, Pittoni, Murphy & Bach has agreed to pay $200,000 to the state over data security lapses that led to a 2021 data breach.

---

Use of IPFS in mass and targeted phishing campaigns

The use of IPFS is not limited to mass mailing campaigns: it is used for complex targeted attacks too. Targeted phishing campaigns are much better prepared, normally focusing on specific persons within the company, not just random users.