Hackers drain over $80M from Rari Capital and Fei Protocol DeFi projects
Fei Protocol and Rari Capital have offered the hacker behind the attack a $10 million bounty if they return the remaining user funds.
Fei Protocol and Rari Capital have offered the hacker behind the attack a $10 million bounty if they return the remaining user funds.
A near-total internet blackout has been registered across Kherson region that affected various Ukraininan providers, including Ukrtelecom, Kyivstar, and Volia.
In the recent campaign the hackers were observed using two new malware families - BEATDROP and BOOMMIC downloaders.
The researchers believe that the REvil ransomware operation was relaunched by one of the group’s original core developers.
The attackers used compromised network equipment outside Romania to launch DDoS attacks.
The hacked websites contain a malicious JavaScript code, which generates malicious traffic to a list of URL addresses included in the code.
The advisory now includes additional IoCs for WhisperGate and technical details for HermeticWiper, IsaacWiper, HermeticWizard, and CaddyWiper malware.
The attacks were orchestrated by threat actors linked to the Russian military intelligence service, including APT28, Sandworm, Gamaredon, EnergeticBear, and Turla.
In March, Ukraine's Minister of Digital Transformation Mykhailo Fedorov asked DJI to "block products that are helping Russia to kill the Ukrainians."
Attackers can use the vulnerability to deploy ransomware or cryptomining malware as part of initial access, lateral movement, or privilege escalation.
Showing elements 2691 - 2700