Cybersecurity News - Page 290

The Triada trojan can download additional malware, launch ads, issue subscriptions, and intercept a user’s SMSs.

The attacks, believed to have been orchestrated by LULU, a threat actor linked to the government of Bahrain, targeted nine Bahraini activists between June 2020 and February 2021.

The cybercriminal group conducted ransomware attacks since November 2020.

The ransomware operators claim to have stolen 250 GB of data from the company.

The researchers noticed that one of the flaws (CVE-2021-35395) has been exploited in the wild to spread a Mirai variant.

Exposed data includes COVID-19 vaccination records, social security numbers and email addresses tied to 47 entities, including American Airlines, Ford, and Microsoft.

Threat actors breached networks via Microsoft Exchange Servers, however, the exact method of compromise is unknown at the moment.

Attackers use the ProxyShell exploit to install a backdoor for later access and post-exploitation.

Currently, the extent of the breach is unclear, and it’s also unknown who may have been behind the cyberattack.

Microsoft has shared how-to on defending against Mozi IoT botnet.