The activity appears to have been done for espionage purposes and Mandiant believes it has a “nexus to China,” an assessment that was made with only low confidence.
In the enterprise security news, SentinelOne and Crowdstrike reinvest in the security market, Malwarebytes raises $100M, Ox Security raises a $34M Seed round??? Jamf acquires ZecOps, New startups looking to improve Code Reviews…Outsource questionnaires…provide consumer privacy awareness…Federal security funding for state and local governments, New ...
Threat actors have been spreading the information-stealing malware-as-a-service Erbium as phony video game cracks and cheats in an effort to facilitate credential and cryptocurrency wallet theft, according to BleepingComputer.
Cyberattacks with the novel LOWZERO backdoor malware have been launched by Chinese advanced persistent threat group TA413, also known as LuckyCat, against Tibetan entities, The Hacker News reports.
Russian state-sponsored threat group APT28, also known as Fancy Bear, has been spreading the Graphite malware using a novel code execution approach involving mouse movement in Microsoft PowerPoint files, reports BleepingComputer.
This week, we're joined by Casey Ellis to discuss a Telco breach from a land down under, UK government sits out bug bounty boom but welcomes vulnerability disclosure, Karakurt Data Extortion Group, Microsoft Releases Workaround for ‘One-Click’ 0Day Under Active Attack, being caught with your pants down, & more!
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.