Cyber Security Week in Review: September 1, 2023
The world in brief: The notorious Qakbot botnet dismantled, a free decryptor released for Key Group ransomware victims, and more.
The world in brief: The notorious Qakbot botnet dismantled, a free decryptor released for Key Group ransomware victims, and more.
The malware enables unauthorized access to compromised devices and is designed to steal sensitive data.
The purpose of the malicious apps is to exfiltrate data from infected Android devices.
The additional malware includes the Skipjack and Depthcharge backdoors, the Foxglove and Foxtrot keyloggers, and a new version of the Seaspy backdoor.
The company also blocked malicious website domains and fake accounts linked to the Russian “Doppelganger” operation.
The FBI uninstalled the Qakbot malware from hundreds of thousands of infected computers.
QakBot was responsible for 30% of the attacks, followed by SecGholish and Raspberry Robin.
The intrusion started in the autumn of 2022 and lasted until June of this year.
One of the suspects is a serving police officer.
Sophos has linked the attacks to a threat actor it tracks as ‘STAC4663’ believed to be associated with the FIN8 cybercrime group.
Showing elements 1791 - 1800