New Threat Actor ‘AeroBlade’ Targeted US Aerospace Firm in Espionage Campaign

December 5, 2023 at 09:24AM A new hacker group, AeroBlade, is responsible for a cyberespionage attack on a US aerospace company, according to BlackBerry. Key Takeaways from the Meeting: 1. A cyberattack has been carried out against a U.S.-based aerospace organization. 2. The cyberattack is attributed to a newly identified threat actor named AeroBlade. 3. … Read more

New Threat Actor ‘AeroBlade’ Emerges in Espionage Attack on U.S. Aerospace

December 5, 2023 at 03:12AM A new cyber threat, AeroBlade, targeted a U.S. aerospace company in a suspected espionage attempt. The BlackBerry team identified the attack, which utilized spear-phishing, remote template injection, and a malicious VBA macro. Attacks started in September 2022 and became more stealthy over time, culminating in July 2023 with a reverse … Read more

Tipalti investigates claims of data stolen by ransomware gang

December 4, 2023 at 02:27PM Tipalti is probing a potential breach by ALPHV ransomware, who claim to have stolen 265 GB of data, including information from Twitch and Roblox. The gang, undetected since September, intends to extort affected Tipalti customers individually, with the company asserting robust security measures are in place. Meeting Summary: **Issue:** Possible … Read more

New AeroBlade hackers target aerospace sector in the U.S.

December 4, 2023 at 10:01AM BlackBerry uncovered ‘AeroBlade’, a new hacking group targeting the U.S. aerospace sector. Using spear-phishing attacks, AeroBlade deployed reverse-shell payloads for data theft, focusing on cyber espionage. The threat evolved from testing in 2022 to sophisticated attacks in 2023, with unknown origins and objectives speculated to be selling or leveraging stolen … Read more

Discover How Gcore Thwarted Powerful 1.1Tbps and 1.6Tbps DDoS Attacks

December 1, 2023 at 05:48AM The latest Gcore Radar report has revealed an unprecedented surge in DDoS attacks, with intensities surpassing 1.5 Tbps. Gcore successfully defended a gaming industry customer against two substantial DDoS attempts using a variety of defense strategies, including dynamic traffic shaping, anomaly detection, regular expression filters, and collaborative threat intelligence, thereby … Read more

Okta Breach Widens to Affect 100% of Customer Base

November 30, 2023 at 05:56PM Okta updated the impact of its September hack from less than 1% to all customers, revealing the potential for heightened phishing risks due to leaked user data. Despite this, Okta reported a 20% revenue increase and remains optimistic about its identity platforms. However, some are observing a market shift away … Read more

Rogue ex-Motorola techie admits cyberattack on former employer, passport fraud

November 29, 2023 at 08:23PM Andrew Mahn, ex-Motorola technician, pleaded guilty to passport and wire fraud after launching a cyberattack on the company and attempting to acquire a passport with false credentials while pending trial. Mahn stole Motorola data, including code to unlock radio features, using employee credentials obtained via phishing. Sentencing is set for … Read more

Uncle Sam probes cyberattack on Pennsylvania water system by suspected Iranian crew

November 29, 2023 at 04:28PM CISA investigates a cyberattack on a Pennsylvania water authority by suspected Iranian hackers targeting PLCs in US infrastructure. The Municipal Water Authority of Aliquippa switched to manual controls after an attack, causing operational inconvenience but not affecting water quality. Meanwhile, a Texas water district is recovering from a ransomware attack … Read more

Qilin ransomware claims attack on automotive giant Yanfeng

November 28, 2023 at 02:44PM The Qilin ransomware group has claimed responsibility for a cyber attack on Yanfeng Automotive Interiors, a major automotive parts supplier. The attack disrupted production at Stellantis, and Qilin has threatened to release sensitive data. Qilin is known for targeting companies in all sectors and recently rebranded its ransomware. Group-IB has … Read more

DP World confirms data stolen in cyberattack, no ransomware used

November 28, 2023 at 12:15PM DP World Australia, a major logistics company, has confirmed that data was stolen during a recent cyber attack on its systems. The attack disrupted operations at five Australian ports, leaving over 30,000 containers stranded. Although no ransomware was used, DP World confirmed that some files were accessed and a small … Read more