Email security

BleepingComputer reports that attacks leveraging vulnerabilities impacting webmail servers have been deployed by Russian state-sponsored threat operation APT28 against government organizations, defense firms, military units, and critical infrastructure entities across several countries, including Ukraine, Bulgaria, and Ecuador, as part of the RoundPress cyberespionage campaign.

Indiana officials are urging residents to delete phishing emails impersonating state agencies and falsely claiming unpaid toll violations, StateScoop reports.

Major government software service provider Granicus was noted by Indiana and New Mexico's Doa Ana County to have had its GovDelivery email alert system exploited in phishing attacks, TechCrunch reports.

Browser fingerprinting and additional payload encryption are the most recent methods used.

A recent malspam campaign revealed a payload nested within two .NET assemblies.

Updated attack arsenal leveraged in MirrorFace attacks against Japan, Taiwan Attacks with the ROAMINGHOUSE malware and an updated ANEL backdoor have been launched by Chinese hacking operation MirrorFace, also known as Earth Kasha, against Japanese and Taiwanese government agencies and public entities as part of a new cyberespionage campaign, according to The Hacker News.

Intrusions with CoGUI commenced with the distribution of phishing emails urging immediate recipient action.