Cybersecurity News - Page 271

After the company refused to pay the ransom, the hackers launched a massive DDoS attack against Kyivstar, which reached a size of 1.5 tbps.

One of the PingPull variants uses ICMP which makes it difficult to detect its command-and-control communications.

The researchers were able to trace the threat to a Russian-speaking threat actor.

AvosLocker and Cerber2021 ransomware gangs have begun to target vulnerable internet-exposed Atlassian Confluence servers.

Using a customized version of the DIG.net open-source tool the backdoor carries out "DNS hijacking" attacks, executes commands, drops payloads, and steals data.

This is yet another malicious campaign that exploits the Follina vulnerability.

Vice Society posted an announcement on their dark net leak site threatening to release all stolen files if the requested ransom is not paid.

The new module sends the collected data to a different remote command-and-control server.

The malware provides its operator with rootkit functionality, the ability to harvest credentials, and remote access capability.

The group’s attacks typically drop one of two backdoors, Mongall and a modified version of the open source Heyoka project.