French issue alerte rouge after local governments knocked offline by cyber attack

April 12, 2024 at 01:32AM Multiple French municipal governments experienced a “large-scale cyber attack” on shared servers, causing disruptions to services in Saint-Nazaire, Montoir-de-Bretagne, Donges, La Chapelle-des-marais, Porniche, Sonadev, and the Agency for the Sustainable Development of the Saint Nazaire Region. The origin and duration of the attack are unknown, with potential links to pro-Russia … Read more

Inside AWS’s Crusade Against IP Spoofing and DDoS Attacks

April 11, 2024 at 10:48AM AWS VP and Distinguished Engineer, Tom Scholl, is actively combating DDoS attacks by addressing the long-standing issue of IP spoofing. By engaging with external networks and leveraging AWS’s global visibility, they have made significant strides in disrupting IP spoofing-based attacks. The company’s efforts not only protect its own network but … Read more

10-Year-Old ‘RUBYCARP’ Romanian Hacker Group Surfaces with Botnet

April 9, 2024 at 10:45AM RUBYCARP, a suspected Romanian threat group, has been running a botnet for over 10 years, using it for crypto mining, DDoS, and phishing. The group utilizes various public exploits and brute-force attacks, communicates through IRC networks, and employs a malware called ShellBot. Their activities include exploiting security flaws, creating a … Read more

Cybersecurity Threats Intensify in the Middle East During Ramadan

April 2, 2024 at 01:05AM Security teams in the region are bolstering their defenses in response to short-staffing and heightened DDoS, phishing, and ransomware attacks during the Muslim holy month. Based on the meeting notes, the key discussion points are related to how security teams in the region are enhancing their defenses to cope with … Read more

US Government Issues New DDoS Mitigation Guidance

March 22, 2024 at 09:54AM CISA, FBI, and MS-ISAC have issued updated joint guidance on defending against DoS and DDoS attacks. The guidance categorizes attacks, provides mitigation recommendations, and outlines differences between DoS and DDoS attacks. Organizations are advised to conduct risk assessments, implement network monitoring, and activate incident response plans to minimize potential damage … Read more

The unlikely 3 million electric toothbrush DDoS attack

February 7, 2024 at 12:25PM The widely reported story about 3 million electric toothbrushes being hacked with malware for DDoS attacks appears to be a hypothetical scenario rather than an actual attack. The dramatic story lacked verification and was likely misunderstood or taken out of context. It serves as a reminder to keep internet-exposed devices … Read more

DirtyMoe Malware Infects 2,000+ Ukrainian Computers for DDoS and Cryptojacking

February 4, 2024 at 12:19PM CERT-UA has warned of over 2,000 computers in Ukraine infected with DirtyMoe malware, attributed to threat actor UAC-0027. The malware conducts cryptojacking and DDoS attacks, and is propagated through Purple Fox and fake software installers. Another campaign known as STEADY#URSA targets Ukrainian military personnel with a PowerShell backdoor. Gamaredon is … Read more

Bigpanzi botnet infects 170,000 Android TV boxes with malware

January 17, 2024 at 01:57PM Summary: The cybercrime syndicate ‘Bigpanzi’ has been infecting Android TV and eCos set-top boxes to create a large botnet used for illegal activities, including media streaming, DDoS attacks, and content provision. Their customized malware, pandoraspear and pcdn, poses serious cybersecurity threats. The scale of their operations, involving over 1.3 million … Read more

Anonymous Sudan Launches Cyberattack on Chad Telco

January 11, 2024 at 11:07AM Anonymous Sudan launched a “massive cyberattack” on Sudachad, a telecommunications provider in Chad. The attack targeted critical infrastructure, leading to a collapse in Internet connectivity on Jan. 10. The group cited Chad’s support for the paramilitary group Rapid Support Forces as the motive. Sudachad holds a 20-year concession agreement for … Read more

Bangladesh Election App Crashes Amid Suspected Cyberattack

January 9, 2024 at 10:56AM Ukraine and Germany are accused of launching a cyberattack to disrupt a Bangladesh national election app. The app, used to provide election updates and candidate data, is impacted by slow performance. Although the exact nature of the attack is not specified, it’s suspected to be caused by botnets from Ukraine … Read more