Data Security

Information-stealing malware has been deployed by North Korean state-backed hacking group Kimsuky in ongoing attacks against South Korean organizations exploiting Compiled HTML Help files, reports The Hacker News.

More than 100 organizations in the U.S. and Europe have been subjected to a far-reaching StrelaStealer malware attack campaign aimed at exfiltrating email account credentials that peaked from late January to early February, BleepingComputer reports.

Google Mandiant says APT29 targeted German politicians and is a threat to Western political parties.

Lazarus, which has since tapped the Sinbad.io and Blender.io crypto-mixing services to launder proceeds from the Atomic Wallet, Axie Infinity, and Horizon Bridge attacks, may have been looking to conceal transactions with the recent use of Tornado Cash.

Research suggest employees are increasingly sending sensitive data to OpenAI’s chatbot.

Security pros say this case illustrates why attackers go after third-party providers to penetrate major financial companies like American Express.

Cencora maintains there’s no connection between its recent incident and the attack on Change Healthcare.