The report follows a series of Sophos reports detailing five years of encounters with Chinese threat actors increasingly targeting networking devices globally.
The attackers exploited CVE-2024-38094 to gain unauthorized access to a vulnerable SharePoint server.
In brief: Hackers are exploiting critical zero-day flaw in PTZ cameras, the Dstat.cc DDoS service disrupted by law enforcement, and more.
The theory is that Andariel is either working as an affiliate of Play ransomware or serving as an initial access broker.
The attack deploys the Litemanager RMT, which provides unauthorized access to the infected computer.
Threat actors use Meta’s platform to promote fake advertisements for popular software tools.
In many cases, the interval between initial access and data encryption was about ten hours on average.
The threat actor targeted more than 100 organizations via phishing emails designed to trick users into opening an RDP configuration file.
The breach exposed the personal data of some of Free’s 22.9 million customers.
The sanctioned entities include the Social Design Agency (SDA) and its partner company Structura.
Showing elements 1101 - 1110