July 8, 2024 at 02:48AM On Jul 4, 2024, Apple removed multiple VPN apps from its App Store in Russia, complying with a request from Roskomnadzor. This affected apps from 25 VPN service providers, including NordVPN and Le VPN. These actions have been criticized for supporting censorship, leading some services to offer alternative ways to … Read more
June 25, 2024 at 11:15AM The European Council has imposed sanctions on six Russian nationals for cyber activities targeting the EU and Ukraine. This marks the first time the EU has taken such measures against cybercriminal actors using ransomware. The list includes individuals linked to cyberattack groups, and the sanctions freeze their assets while prohibiting … Read more
May 31, 2024 at 02:38AM Cloudflare’s threat intel team thwarted a month-long phishing and espionage attack targeting Ukraine, attributed to Russia-aligned group FlyingYeti. The attack targeted financially strained citizens after a government moratorium on evictions and utility disconnections ended. Cloudforce One stopped the threat, but the target base might have been vast. FlyingYeti intended to … Read more
May 15, 2024 at 09:07AM An unnamed European Ministry of Foreign Affairs and its three diplomatic missions in the Middle East were targeted by two new backdoors, LunarWeb and LunarMail, attributed with medium confidence to the Russia-aligned cyberespionage group Turla. The backdoors use HTTP(S) and email messages for their communication, and appear to have been … Read more
May 7, 2024 at 07:09AM Germany recalled its ambassador to Russia for a week of consultations following an alleged hacker attack on Chancellor Olaf Scholz’s party. The government expressed serious concern over the incident and accused Russian military agents of cyberespionage, leading to diplomatic tensions between Germany and Russia. Other European countries also condemned the … Read more
May 4, 2024 at 07:57AM German officials accused Russian military agents of hacking Chancellor Olaf Scholz’s party and other sensitive targets, with NATO and European countries joining in condemning Russia’s cyberespionage actions. The hacking, attributed to Russian military cyber operators, targeted emails and institutions over several months. International efforts shut down the botnet used by … Read more
May 3, 2024 at 09:10AM Trend Micro reports that the APT28 cyberespionage group, linked to Russia, used a botnet of Ubiquiti routers for espionage. The FBI dismantled the botnet in January 2024, but Trend Micro found remnants and expanded botnet details. APT28 used infected devices for various illicit activities, including proxying stolen credentials and cryptocurrency … Read more
April 23, 2024 at 10:13AM APT28, a Russia-linked cyberespionage group, utilized Windows Print Spooler vulnerabilities to deploy GooseEgg, a custom post-exploitation tool targeting organizations in the US, Ukraine, and Western Europe. The tool can grant attackers elevated privileges, enabling activities such as remote code execution and backdoor deployment. Microsoft advises applying security updates and disabling … Read more
April 18, 2024 at 04:03AM Cybercrime experts surveyed reveal expected leaders Russia, Ukraine, and China as top cybercrime-producing nations, along with surprising results. Based on the meeting notes, the clear takeaway is that the top cybercrime-producing nations, according to a survey of experts, include expected leaders Russia, Ukraine, and China, as well as some surprises. … Read more
March 26, 2024 at 05:09AM The US Department of the Treasury’s Office of Foreign Assets Control (OFAC) imposed sanctions on three cryptocurrency exchanges for aiding in circumventing economic restrictions on Russia following its invasion of Ukraine. The designations cover thirteen entities and two individuals operating in the Russian financial services and technology sectors, freezing their … Read more