Security Affairs
Microsoft linked a series of wiping attacks to a Russia-linked APT group, tracked as Cadet Blizzard, that is under the control of the GRU. Microsoft attributes the operations carried out by the Russia-linked APT group tracked as Cadet Blizzard to the Russian General Staff Main Intelligence Directorate (GRU). The IT giant pointed out that Cadet Blizzard is […]
The Record
Two men arrested in Poland in April have now been charged with spying for the Russian military intelligence service (GRU), the Warsaw prosecutor’s office announced Wednesday.
Security Affairs
Polish authorities charged Russian and Belarusian individuals with spying for the Russian military intelligence service (GRU). Polish authorities charged Russian and Belarusian individuals, who were arrested in April, with spying for the Russian military intelligence service (GRU) from 2017 to April 2022. The defendants gathered intelligence on military facilities critical for the defense of the […]
Bleeping Computer
Microsoft has linked a threat group it tracks as Cadet Blizzard since April 2023 to Russia's Main Directorate of the General Staff of the Armed Forces (also known as GRU).
Security Affairs
The White House has linked the recent DDoS attacks against Ukraine ‘s banks and defense agencies to Russia’s GRU. The White House has linked the recent DDoS attacks that took offline the sites of banks and defense agencies of Ukraine to Russia’s Main Directorate of the General Staff of the Armed Forces (aka GRU). This […]
Bleeping Computer
Today, the White House has linked the recent DDoS attacks that knocked down the sites of Ukrainian banks and defense agencies to Russia's Main Directorate of the General Staff of the Armed Forces (also known as GRU).
Bleeping Computer
Hackers working for the Main Directorate of the General Staff of the Armed Forces of the Russian Federation, more commonly known as the GRU, have been targeting Android devices in Ukraine with a new malicious framework named 'Infamous Chisel.
The Record
The US Department of Justice has charged today five Russian nationals, including a former officer of Russia's GRU military intelligence agency, with hacking two SEC Filing Agents, stealing non-public information, and then sharing the stolen data with partners for the purpose of making beneficial trades ahead of time.
Krebs on Security
In 2021, the exclusive Russian cybercrime forum Mazafaka was hacked. The leaked user database shows one of the forum's founders was an attorney who advised Russia's top hackers on the legal risks of their work, and what to do if…
CyberScoop
Strontium — a group linked to Russian military intelligence — was using the domains to target Ukrainian institutions, Microsoft said.
Infosecurity News
Infamous Chisel, which enables unauthorized access to compromised Android devices used by the Ukrainian military, has been linked to Sandworm
The Cyber Wire
Russia's military intelligence service is running a phishing campaign aimed at collecting against European humanitarian organizations.
The Record
The court-authorized operation in January neutralized a botnet of routers “used to conceal and otherwise enable a variety of crimes," the Department of Justice said.
The Record
The U.K.'s National Cyber Security Centre and allied agencies issued a technical report detailing "Infamous Chisel," a set of hacking tools that Russia is using against Ukrainian military tablet computers.
DataBreaches
Inform Napalm reports: Ukrainian hacktivist team Cyber Resistance hacked the email of Lieutenant Colonel Sergey Alexandrovich Morgachev, an officer of the...
The Cyber Wire
The Five Eyes jointly expose (and condemn) a long-running FSB cyberespionage and influence campaign.
The Cyber Wire
The Five Eyes jointly expose (and condemn) a long-running FSB cyberespionage and influence campaign.
Bleeping Computer
The National Security Agency (NSA) warns that Russian nation-state hackers are conducting brute force attacks to access US networks and steal email and files.
Infosecurity News
Microsoft believes Cadet Blizzard, formerly DEV-0586, to be associated with the Russian GRU
CyberNews
Malware developed by six Russia’s foreign military intelligence (GRU) hackers cost US companies over $1 billion in losses.
CyberNews
The Department of Justice (DoJ) says it has taken down a global botnet controlled by Russia’s military intelligence agency, the GRU.
CyberNews
Russia's military spy service, the GRU, is said to be behind the hacking of Viasat's European satellite network.
DarkReading
The operation aimed to disrupt cyber espionage activity a Russian GRU group was using for the Ukraine war.
The Record
The State Department's announcement is based on charges filed in 2020 by the Justice Department against the six GRU members.
Security Affairs
The U.S. government offers up to $10 million for info that allows to identify or locate six Russian GRU hackers who are members of the Sandworm APT group. The US Department of State is offering up to $10 million for info that allows to identify or locate six Russian GRU hackers who are members of […]
Cyber Security News
A threat group connected to Russia's GRU, hacked the Roundcube email servers of over 40 Ukrainian organizations, including government bodies.
CyberSecurity Dive
Russia’s GRU-backed group exploited hundreds of vulnerable routers to conduct spear phishing and credential harvesting attacks against U.S. targets.
DataBreaches
Chris Riotta reports: Hackers potentially linked to the Russian GRU Main Intelligence Directorate carried out a series of highly coordinated cyberattacks...
The Hacker News
Russian GRU-backed threat actor APT28 is behind campaigns targeting networks across Europe with HeadLace malware and credential-harvesting web pages.
The Record
A phishing campaign against Polish institutions was the work of Russia’s military intelligence agency, the GRU, according to CERT-PL.
Bleeping Computer
The U.S. is offering up to $10 million to identify or locate six Russian GRU hackers who are part of the notorious Sandworm hacking group.
The Cyber Wire
Both sides exchange missile strikes (and conflicting claims of their effectiveness). The GRU is now, by general consensus, responsible for the long-running cyberattack against Kyivstar.
The Record
The malicious code allows attackers to steal credentials and perform other tasks. Microsoft says it appears to be unique to Russia's military intelligence agency, the GRU.
CyberScoop
Officials attributed the botnet, called Cyclops Blink, to Russia's GRU, which has a long history of high-profile cyberattacks.
The Hacker News
Microsoft reveals a new Russian threat actor, Cadet Blizzard, linked to GRU, with a lower success rate but high destructive activity.
Infosecurity News
Mandiant has observed that the same playbook has been used by various Russian threat actors since the breakout of war in Ukraine, making them likely to be part of a GRU-led deliberate strategy
Bleeping Computer
The FBI took down a botnet of small office/home office (SOHO) routers used by Russia's Main Intelligence Directorate of the General Staff (GRU) in spearphishing and credential theft attacks targeting the United States and its allies.
Bleeping Computer
Poland says a state-backed threat group linked to Russia's military intelligence service (GRU) has been targeting Polish government institutions throughout the week.
Bleeping Computer
A threat group tracked as APT28 and linked to Russia's General Staff Main Intelligence Directorate (GRU) has breached Roundcube email servers belonging to multiple Ukrainian organizations, including government entities.
Bleeping Computer
Microsoft has patched an Outlook zero-day vulnerability (CVE-2023-23397) exploited by a hacking group linked to Russia's military intelligence service GRU to target European organizations.
SecurityWeek
The U.S. government says it has disabled the "Cyclops Blink" botnet of hardware devices controlled by Russia’s main intelligence agency (GRU).
CyberSecurity Dive
Strontium, a GRU-linked threat actor, targeted Ukraine media, foreign policy think tanks and government agencies in the U.S. and Europe.
DarkReading
Russian General Staff Main Intelligence Directorate (GRU) hacking team appears to have swapped its VPNFilter malware platform for the so-called Cyclops Blink malware framework.
CyberScoop
The Biden administration on Thursday sanctioned Russian oligarchs and organizations for their role in spreading disinformation and supporting Russian President Vladimir Putin’s war in Ukraine, among them a news agency the Treasury Department says has ties to a Russian cyber-espionage and offensive unit. The sanctions targeted nine employees of InfoRos, a nominal news agency primarily run by the GRU, which controls the Russian military intelligence service and operates its own special forces units. According to the Treasury Department, the GRU’s 72nd Main Intelligence Information Center, a unit within Russia’s Information Operations Troops, functions as Russia’s “military force for conducting cyber espionage, influence, and offensive cyber operations” and is InfoRos’ operator. In a news release, the Treasury Department said InfoRos is a network of more than 1,000 websites which “spread false conspiracy narratives and disinformation promoted by GRU officials.” For example, in early December, 2021, Treasury officials said one Ukraine-based InfoRos […]
Cyber Security News
Russia's invasion of Ukraine on February 24, 2022, followed escalating cyber operations, categorized into six phases, by Russian troops amassed at the border.
SecurityWeek
The US government says it has neutralized a network of hundreds of Ubiquiti Edge OS routers under the control of the notorious APT28 group.
Bleeping Computer
The sites of several Ukrainian government agencies (including the Ministries of Foreign Affairs, Defense, and Internal Affairs, the Security Service, and the Cabinet of Ministers), and of the two largest state-owned banks are again targeted by Distributed Denial-of-Service (DDoS) attacks.
Bleeping Computer
The United States government is formally accusing the Russian government of the SolarWinds supply-chain attack that gave hackers access to the network of multiple U.S. agencies and private tech sector companies.
DataBreaches
Kellen Dwyer, Kim Peretti, and Emily Skahill of Alston & Bird write: The Department of Justice dealt a blow to global cybercrime on April 6 with the...
Bleeping Computer
CISA urged leaders of U.S. critical infrastructure organizations on Friday to increase their orgs' resilience against a growing risk of being targeted by foreign influence operations using misinformation, disinformation, and malformation (MDM) tactics.
DarkReading
The feds have disrupted a Russian intelligence SOHO router botnet notable for being built with Moobot malware rather than custom code.
Ars Technica
Feds once again fix up compromised retail routers under court order.
CSO
A now-patched Windows Print Spooler flaw was used by Forest Blizzard to drop the privilege-elevating malware for credential stealing and persistence.
The Record
In an exclusive interview with the Click Here podcast team, the FBI's leader talks about Operation Dying Ember to squash a Russian botnet; the Chinese group known as Volt Typhoon; and how his counterterrorism experience influences the fight against cyberthreats.
CSO
The alert provides detailed information on Russian government and state-sponsored cybercriminal groups as well as guidance for reducing risk.
CyberScoop
Dubbed "Cadet Blizzard," the hacking group carried out operations targeting Ukrainian infrastructure in the run-up to the Russian invasion.
The Cyber Wire
Russian intelligence and security services are running at least two large-scale influence and cyberespionage campaigns against Western targets, one a mass-marketed coordinated inauthenticity effort, the other a closely targeted spearphishing operation.
The Record
The Treasury announced sanctions on Russian companies, including some connected to disinformation operations with links to intelligence.
.webp)
Cyber Security News
A group of Russian-speaking hackers claimed responsibility for a cyber attack on a wastewater treatment plant in Tipton, Indiana.
SecurityWeek
Microsoft has disrupted the infrastructure used by Russia’s cyberespionage group APT28 (aka Strontium and Fancy Bear) in attacks aimed at Ukraine.
CyberSecurity Dive
Administration officials said there are no specific or credible cyberthreats to the U.S., but private sector organizations should report unusual activity.
SC Magazine
For the second time this year, U.S. authorities neutralize a botnet of SOHO routers run by nation-state threat actors.
Infosecurity News
Military officers were indicted for the campaign in 2020
SecurityWeek
The United States is offering $10 million in rewards for help in prosecuting six Russian military intelligence officers blamed for the devastating NotPetya cyberattacks in 2017
DarkReading
Microsoft says Cadet Blizzard wielded a custom wiper malware in the weeks leading up to Russia's invasion of Ukraine, and it remains capable of wanton destruction.
The Hacker News
U.S. government disrupted a botnet comprised of SOHO routers used by the Russia-linked APT28 group for malicious activities.
The Hacker News
WinRAR users, be alert! Pro-Russian hackers exploited a recent vulnerability in the software. Ensure your version is updated!
Bleeping Computer
Ukrainian government entities were hacked in targeted attacks after their networks were first compromised via trojanized ISO files posing as legitimate Windows 10 installers.
Bleeping Computer
The new data wiper malware deployed on Ukrainian networks in destructive attacks on Wednesday right before Russia invaded Ukraine earlier today was, in some cases, accompanied by a GoLang-based ransomware decoy.
CyberNews
Fancy Bear attacks prompted Germany to react diplomatically.
The Record
The accusations agains the athlete come as European nations remain on heightened alert for potential incidents against critical infrastructure.
DataBreaches
Lorenzo Franceschi-Bicchierai reports: The U.S. government announced on Wednesday that it had disrupted a botnet controlled by Russian government hackers...
DataBreaches
Zack Whittaker reports: The U.S. government has stepped up its hunt for six Russian intelligence officers, best known as the state-backed hacking group dubbed...
The Cyber Express
In a world where cyber threats loom large and state-sponsored actors continually probe for vulnerabilities, the recent revelation of the
Bleeping Computer
The European Union has officially linked Russia to a hacking operation known as Ghostwriter that targets high-profile EU officials, journalists, and the general public.
The Cyber Wire
A Russian privacy law seems to have as its principal purpose controlling anything that might resemble independent journalism in advance of the upcoming presidential election theater.
DataBreaches
Bill Toulas reports: The Russian APT28 hacking group (aka ‘Strontium’ or ‘Fancy Bear’) has been targeting government entities,...
Security Affairs
This post provides a timeline of the events related to the Russia invasion of Ukraine from the cyber security perspective. Below is the timeline of Russia – Ukraine cyber dispute February 27 – Ukraine: Volunteer IT Army is going to hit tens of Russian targets from this list Ukraine is recruiting a volunteer IT army […]
CyberScoop
The State Department is offering $10 million for the location of six Russian intelligence officers in the Sandworm unit who are believed to be the architects of the devastating NotPetya attacks.
DataBreaches
Patrick Howell O’Neill reports: Just 48 hours after banks and government websites crashed in Ukraine under the weight of a concerted cyberattack on...
Ars Technica
Russia has greatly accelerated cyberattacks on its neighbor in the wake of its invasion.
The Cyber Express
A recent investigation led by the German Foreign Office has unveiled startling revelations: Russian hackers, with alleged state support, have
CyberScoop
A long-running hacking group associated with Russian intelligence has developed a new set of tools to replace malware that was disrupted in 2018, according to an alert Wednesday from the U.S. and U.K. cybersecurity and law enforcement agencies. The advanced persistent threat group, known primarily as Sandworm, is now using a “large-scale modular malware framework” that the agencies call Cyclops Blink. Western governments have blamed Sandworm for major incidents such as the disruption of Ukraine’s electricity grid in 2015, the the NotPetya attacks in 2017 and breaches of the Winter Olympics in 2018. Cyclops Blink has largely replaced the VPNFilter malware in Sandworm’s activities since at least June 2019, said the joint alert from the U.K.’s National Cyber Security Centre (NCSC), and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, National Security Agency and FBI in the U.S. The NCSC also issued a separate analysis paper on Cyclops Blink. […]
ZDNet
The Justice Department in March disrupted the Russian Federation's control over thousands of infected devices
Bleeping Computer
Microsoft has successfully disrupted attacks against Ukrainian targets coordinated by the Russian APT28 hacking group after taking down seven domains used as attack infrastructure.
CyberNews
Microsoft is urging Outlook users to patch and update their systems to mitigate a new threat from Russia.
SecurityWeek
Weakening liberal democracies and weakening the NATO alliance are conjoined in the hybrid war that Russia is conducting against Ukraine.
SecurityWeek
New study from Trustwave analyzes the Russian state cyberattacks against Ukraine since the war began, tying the attack groups back to their controlling state agencies.
Cyber Security News
Hackers abuse Windows Print Spooler vulnerabilities because it runs with elevated SYSTEM privileges which allows privilege escalation.
The Cyber Express
Microsoft researchers uncovered a new tool in the Russian state hackers’ arsenal that helped them gain elevated access, pilfer credentials
The Record
At the CyCon conference in Estonia, Regine Grienberger said Germany is working on satisfying "preconditions" for diplomatic action against Russia for an alleged cyberattack on a German political party in 2023.
The Record
Hackers connected to the governments of Russia and China are allegedly using a vulnerability in a popular Windows tool to attack targets around the world, including in Ukraine and Papua New Guinea.
Infosecurity News
The routers were hijacked to steal credentials, proxy traffic, and host phishing pages and custom tools
SecurityWeek
Google says it is still catching government-backed groups linked to China and Russia launching WinRAR exploits in targeted attacks.
CyberNews
The Russian military-backed hacker collective Sandworm gets a new name from Google Mandiant - APT44 - evolving the group as a formidable threat on a global scale.
CyberNews
Ukraine’s main telecoms provider Kyivstar is back online after a massive cyberattack left millions without service, now two Russian hacker gangs claim responsibility.
CSO
The action targeted devices infected by the Cyclops Blink malware, believed to have been developed by Russia's Sandworm group.
The Record
Russian intelligence, military, and law enforcement have tapped into relationships with hacking groups since its invasion of Ukraine.
Cyber Security News
Linux systems are used widely for servers, cloud environments, and IoT devices which makes them an attractive target to cyber criminals as
.jpg)
The Hacker News
Google TAG identifies state-sponsored cyber actor FROZENLAKE (aka APT28, Fancy Bear, and more) conducting phishing campaigns to extract intelligence.
Loading more articles....