Biztonsági szemle

Ransomware attack earnings rose by $10 million to more than $459 million during the first half of this year, with proceeds poised to reach a record high by year-end amid the increasing prevalence of ransomware intrusions this year.

Included in the 47 GB data exfiltrated from the county clerk's office's systems were financial documents, customer contracts, alarm system information, budget details, ballot information, and voter records as early as 2008, claimed RansomHub.

Malicious payloads delivered following the brute-force attacks enabled XMRig deployment via "systemd-net" and the termination of other malware, as well as the execution of the Id-musl-x86 SSH scanner to facilitate malware spread.

Attacks commence with the delivery of fraudulent business- or finance-related documents, which when executed open the default app for Word documents while establishing a mutex and altering registry entries to ensure persistence.

Approval of an AnyDesk connection authorization request sent by Mad Liberator to one organization prompted the execution of a Windows update screen-emulating binary to obtain device control and access to a linked OneDrive account.

Here’s how to modernize and service customers better, but keep the enterprise secure.

A 2024. 33. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2024.08.09. és 2024.08.15. között kezelt incidensek statisztikai adatait is tartalmazza.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

[This is a Guest Diary by Justin Leibach, an ISC intern as a part of the SANS.edu BACS [1] degree program]

Google says it will remove the package in a firmware update after reports that it has excessive privileges and contains vulnerabilities.

The Open-Source Software Prevalence Initiative, announced at DEF CON, will examine how open source software is used in critical infrastructure.

Personal information, such as mailing addresses and phone numbers, at risk in misconfiguration.