cyberveille.decio.ch

cyberveille.decio.ch

7248 bookmarks
Newest
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
#microsoft#EN#2022#LAPSUS$#DEV-0537#extortion#research#activity#threat#group
·microsoft.com·
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
#microsoft#EN#2022#LAPSUS$#DEV-0537#extortion#research#activity#threat#group
·microsoft.com·
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model without deploying ransomware payloads.
#microsoft#EN#2022#LAPSUS$#DEV-0537#extortion#research#activity#threat#group
·microsoft.com·
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
A travers plusieurs mises à jour de projets open source, des développeurs ont manifesté leur opposition à l’invasion russe de l’Ukraine. Si dans certains cas, l’impact se limite à des messages de sensibilisation, certains projets vont jusqu’à inclure des logiciels malveillants.
#Protestware#FR#2022#zdnetfr#Ukraine#sabotage#opensource#sensibilisation
·zdnet.fr·
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
A travers plusieurs mises à jour de projets open source, des développeurs ont manifesté leur opposition à l’invasion russe de l’Ukraine. Si dans certains cas, l’impact se limite à des messages de sensibilisation, certains projets vont jusqu’à inclure des logiciels malveillants.
#Protestware#FR#2022#zdnetfr#Ukraine#sabotage#opensource#sensibilisation
·zdnet.fr·
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
A travers plusieurs mises à jour de projets open source, des développeurs ont manifesté leur opposition à l’invasion russe de l’Ukraine. Si dans certains cas, l’impact se limite à des messages de sensibilisation, certains projets vont jusqu’à inclure des logiciels malveillants.
#Protestware#FR#2022#zdnetfr#Ukraine#sabotage#opensource#sensibilisation
·zdnet.fr·
Protestware : l’open source n’échappe pas au conflit russo-ukrainien
Exposing initial access broker with ties to Conti
Exposing initial access broker with ties to Conti
Threat Analysis Group (TAG) observed a financially motivated threat actor we refer to as EXOTIC LILY, exploiting a 0day in Microsoft MSHTML (CVE-2021-40444). Investigating this group's activity, we determined they are an Initial Access Broker (IAB) who appear to be working with the Russian cyber crime gang known as FIN12 (Mandiant, FireEye) / WIZARD SPIDER (CrowdStrike).
#GoogleTAG#EXOTICLILY#CVE-2021-40444#0day#reseller#Conti#IAB
·blog.google·
Exposing initial access broker with ties to Conti
Exposing initial access broker with ties to Conti
Exposing initial access broker with ties to Conti
Threat Analysis Group (TAG) observed a financially motivated threat actor we refer to as EXOTIC LILY, exploiting a 0day in Microsoft MSHTML (CVE-2021-40444). Investigating this group's activity, we determined they are an Initial Access Broker (IAB) who appear to be working with the Russian cyber crime gang known as FIN12 (Mandiant, FireEye) / WIZARD SPIDER (CrowdStrike).
#GoogleTAG#EXOTICLILY#CVE-2021-40444#0day#reseller#Conti#IAB
·blog.google·
Exposing initial access broker with ties to Conti