Cybersecurity News - Page 123

In brief: The US bans Russia’s Kaspersky software, Chinese cyber espionage actor exploits Fortinet, Ivanti, and VMware zero-days, and more.

Nobelium's tactics involve using hacked legitimate email accounts belonging to diplomatic staff to conduct phishing campaigns.

The group relies heavily on valid credentials for lateral movement between guest virtual machines on compromised VMware ESXi servers.

The campaign uses SEO poisoning and disseminates malware via social media and messaging platforms.

The stolen data allegedly includes sensitive information about AMD's future products employee databases, and customer databases.

The websites and communication channels had a global reach, spreading directives and slogans of the Islamic State in over 30 languages.

Sagar Steven Singh and Nicholas Ceraolo face a maximum sentence of seven years in prison.

The technique involves directing users to copy and paste malicious PowerShell scripts.

The campaign targets misconfigured services like Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis.

Kandula Nagaraju developed the wiper script using Google searches on how to delete virtual servers.