The Biggest 2024 Elections Threat: Kitchen-Sink Attack Chains

April 25, 2024 at 05:11PM Cyber threats to elections are increasingly complex, with attackers combining tactics like DDoS attacks, fake news, and leaks. Mandiant’s report highlights how these combined attacks can magnify each other’s impact. Chained cyberattacks have disrupted elections in Ukraine and targeted US states’ voting-related websites. Not only state-sponsored actors, but also insiders, … Read more

Digital Blitzkrieg: Unveiling Cyber-Logistics Warfare

April 25, 2024 at 01:05PM The global economy’s reliance on logistics presents a vulnerability to cyberattacks, with potentially catastrophic consequences. The digitalization of supply chains increases susceptibility, and state actors are employing cyber warfare tactics. Collaboration and investment in cyber-defense strategies are essential to safeguard the flow of goods and services. The time to act … Read more

US govt sanctions Iranians linked to government cyberattacks

April 23, 2024 at 02:43PM The Treasury Department’s OFAC has sanctioned four Iranian nationals for cyberattacks against the U.S. government and defense contractors. Two front companies and top officials from the Iranian Armed Forces service have also been targeted. The Justice Department has charged individuals involved in the cyber campaign and is offering rewards for … Read more

Dangerous ICS Malware Targets Orgs in Russia and Ukraine

April 17, 2024 at 04:54PM Two newly discovered malware tools, Kapeka and Fuxnet, have targeted industrial control systems and operating technology in Europe, marking the cyber repercussions of the ongoing conflict between Russia and Ukraine. Kapeka, connected to the Sandworm group, functions as a persistent backdoor, while Fuxnet, used by the Blackjack group, aims to … Read more

Russian Sandworm hackers pose as hacktivists in water utility breaches

April 17, 2024 at 01:13PM Russian military intelligence-linked group Sandworm, also known as APT44, has been conducting cyber attacks by posing as hacktivist groups on multiple Telegram channels. The group employs various methods, including phishing and supply-chain compromise, to target Ukraine and other countries, with potential plans to interfere in national elections. Sandworm has transitioned … Read more

Preparing for Cyber Warfare: 6 Key Lessons From Ukraine

April 17, 2024 at 10:14AM The conflict in Ukraine enters its third year, with cyber operations emerging as a pivotal battleground. Recent cyberattacks have targeted state agencies and financial institutions, underscoring the severity of the digital onslaught. Organizations must prioritize disaster recovery preparedness, personnel safety, backup strategies, cybersecurity training, defense mechanisms, incident response planning, and … Read more

Recent OT and Espionage Attacks Linked to Russia’s Sandworm, Now Named APT44

April 17, 2024 at 08:48AM Mandiant’s report details the recent activities of the Russian Sandworm group, now tracked as APT44, known for disruptive malware and cyber operations tied to conventional military activities. APT44 has been linked to several cyber incidents, hacktivist personas, supply chain attacks, and espionage activities, uncovering new connections and disruptive tactics. Summary: … Read more

Israeli Defense Forces Hold Hybrid Cyber & Military Readiness Drills

April 17, 2024 at 02:07AM Israeli Defense Forces (IDF) held simulated cyber and combat warfare drills, fueling speculation of possible strategic cyberattacks on Iran in response to an aerial drone and missile attack. The drills tested the combination of cyber and kinetic warfare in preparation for Israel’s response to the Iranian attack. Threatening text messages … Read more

Cyber Operations Intensify in Middle East, With Israel the Main Target

April 16, 2024 at 02:08AM As tensions rise in the Middle East, cyberattacks have become a norm in the geopolitical conflict. Israel faces cyber assaults from Iran and Hezbollah, potentially escalating due to ongoing military operations. Iran-linked groups may carry out destructive cyberattacks, while hacktivists show discontent with the situation. Hacktivism continues to fuel attacks … Read more

U.S. Treasury Hamas Spokesperson for Cyber Influence Operations

April 13, 2024 at 10:45AM The U.S. Treasury Department imposed sanctions on a Hamas official, Hudhayfa Samir ‘Abdallah al-Kahlut, for his involvement in cyber influence operations and his role in the military wing. Two others, William Abu Shanab and Bara’a Hasan Farhat, were sanctioned for their involvement in manufacturing UAVs for Hamas. The European Union … Read more