Securezoo Cybersecurity Threat Center blog posts of new cybersecurity attacks.
The city of Atlanta was hit in a massive ransomware attack. Many systems and services were still down nearly four days after the attack first hit last Thursday. The ransomware attack has impacted several of its departments and took down government websites that process payments and relay court information, according to Threatpost. The city’s public services department […]
City of Atlanta victim of ransomware attack Read More »
A suspected Chinese-linked cyber espionage campaign dubbed Temp.Periscope has been targeting engineering and maritime industries. FireEye has observed a spike in the campaign activity since early 2018 and has tracked the activity since 2013.
TEMP.Periscope cyber espionage group targets Engineering and Maritime Industries Read More »
Russian government cyber activity has targeted U.S Government entities, energy and other critical infrastructure sectors. The activity has been active since at least March 2016, according to a US-CERT Technical Alert (TA).
Russian cyber activity targets critical infrastructure and energy sectors Read More »
Proofpoint security researchers have found a new Traffic Distribution System (TDS) dubbed BlackTDS for sale on the Dark Web.
BlackTDS cyber threat Read More »
Researchers at Kroll Cyber Security have identified a new point of sale (POS) malware dubbed PinkKite that has a tiny footprint of just 6K to avoid detection, similar to other POS malware families TinyPOS and AbaddonPOS.
PinkKite POS malware Read More »
Security researchers from FireEye have spotted an Irananian threat group dubbed “TEMP.Zagros” that is targeting government and defense organizations in Asia and the Middle East.
Iranian spear phishing campaign Read More »
A highly sophisticated cyberespionage campaign dubbed Slingshot has been uncovered by Kaspersky security researchers. The campaign targets MikroTik routers to compromise them and use as a springboard to attack victims’ computers, as the company revealed in last week’s Kaspersky Security Analyst Summit (SAS).
Slingshot APT targets routers Read More »
Security researchers at Imperva have spotted a new generation of cryptojacking attacks dubbed RedisWannaMine that targets Windows database and application servers. The campain also leverages the leaked NSA exploit EternalBlue to exploit vulnerable Windows systems.
RedisWannaMine Unveiled Read More »
Hackers have attacked over 1,400 Apache Solr servers late last month to install a cryptocurrency miner.
Hackers exploit Apache Solr instances with cryptocurrency miner Read More »
Nearly 400,000 servers are at risk to a remote code execution vulnerability that impacts open-source Exim message transfer agent (MTA).
Exim remote code execution vulnerability exploits Read More »
