Cybersecurity News - Page 254

GitHub said it is confident that the attackers did not alter any published packages in the registry, or publish any new versions to existing packages.

The group targeted the Austrian Economic Chamber, the Baltic Defense College, and a NATO platform for cyber-espionage purposes.

The suspect registered 240 domains, 50 of which were used as command-and-control domains for the ISRStealer, Pony, and LokiBot malware.

Social Security numbers and driver’s license details weren’t compromised, the company said.

In both cases the attacker appears to have taken over packages that have not been updated in a while.

The security researchers have warned that the gang hasn’t gone anywhere, but simply split into smaller, more novel brands.

A threat actor published malware disguised as two PoC exploits for CVE-2022-24500 and CVE-2022-26809 on GitHub.

Twisted Panda has been targeting a holding company within the Russian state-owned Rostec Corporation with spear-phishing attacks since at least June 2021.

The campaigns leveraged five zero-day flaws in Chrome and Android OS to plant the Predator spyware.

Some of the falsehoods targeted Russian domestic audiences, underscoring Russia’s need to sell the war to its own people.