TRU Security

At the VB2021 localhost cybersecurity conference, Hossein Jazi presented an analysis of a new threat actor dubbed LazyScripter. The cybercrime group has been using spam campaigns to distribute KOCTOPUS, a variant of their loader that deploys the Koadic and OCTOPUS remote access trojans (RATs).

Popular cryptocurrency exchange Coinbase has disclosed that at least 6,000 customers fell victim to a phishing campaign earlier this year, resulting in funds being stolen from their accounts.

U.S. and European law enforcement agencies have arrested two ransomware operators in Ukraine, following a series of coordinated attacks against industrial groups in Europe and North America.

Japanese electronics multinational JVCKenwood and Nebaska-based information processing company Sandhills Global have both fallen victim to Conti ransomware.

Facebook, WhatsApp, and Instagram were offline for 6 hours on Monday Oct 6, following a networking issue. Although no data was leaked or lost, the outage was both embarrassing and expensive.

Human rights organization Amnesty International recently made headlines with a report they released outlining the use of Pegasus malware against activists and journalists. This report, and public trust in the organization, are now being exploited by attackers to distribute Sarwent malware.

A new Trojan by the name of BloodyStealer is targeting Steam, GOG, Epic Games, Origin, Bethesda, and other gaming-related accounts.