
Browse all articles
April 22, 2022
HermeticWiper and HermeticRansom delivered via Active Directory GPO
On February 23, 2022, a new data wiper and ransomware were deployed on a large number of devices in the Ukraine, as ESET Research reported on Twitter. Just before this, a couple of Ukrainian government sites and services were subjected to DDoS attacks. Cybersecurity specialists discovered that the malware was deployed via Microsoft Active Directory GPO.
In addition to the disk wiper and ransomware, a worm component was deploy
April 21, 2022
Nordex Group struck by Conti ransomware
The Nordex Group, known as one of the world's largest manufacturers of wind turbines, has confirmed a cyberattack. The attack was discovered end of last month, and Nordex disabled remote access from some networks to their turbines as a precaution.
April 08, 2022
WhatsApp phishing campaign uses fake voice messages
A new phishing campaign, which uses fake WhatsApp voice messages to trick victims into installing infostealing malware, has already targeted over 27,000 users.
April 08, 2022
New RAT "Borat" is a triple threat
A new remote access Trojan (RAT) by the name of Borat has been appearing on darknet markets. Borat is designed to be easy-to-use, and gives attackers the ability to deploy ransomware, perform DDoS attacks, bypass user account control (UAC), access files and network devices, and even take complete control of a victim's mouse and keyboard.
March 30, 2022
Urgent update issued for Google Chrome
Google has issued an update for its Chrome browser that patches the second "high severity" zero-day vulnerability this year. All 3.2 billion Chrome users are urged to update to Chrome 99.0.4844.84 for Windows, Mac, or Linux immediately.
March 16, 2022
WhisperGate malware targets Ukrainian government sites
Multiple government sites in Ukraine were shut down on January 13, 2022, the result of a large-scale cyberattack by the WhisperGate malware. Microsoft Intelligence named this activity "DEV-0586" and identified it as destructive malware that used to be ransomware. Its main purpose is to disrupt the system and damage files beyond the possibility of their recovery.
March 15, 2022
Auto giant DENSO hit by Pandora ransomware
Pandora ransomware has hit the Japan-based DENSO Corporation, one of the largest automotive parts manufacturers in the world. DENSO — which has more than 200 subsidiaries, almost 170,000 employees, and an annual revenue of over $44 billion — provides parts to Toyota, who just dealt with their own cyberattack, as well as Mercedes-Benz, Fiat, and others.








