Security Affairs newsletter Round 478 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box.

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Infosys McCamish Systems data breach impacted over 6 million people

A cyberattack shut down the University Hospital Centre Zagreb in Croatia

US announces a $10M reward for Russia’s GRU hacker behind attacks on Ukraine

New P2Pinfect version delivers miners and ransomware on Redis servers

New MOVEit Transfer critical bug is actively exploited

New Caesar Cipher Skimmer targets popular CMS used by e-stores

Mirai-like botnet is exploiting recently disclosed Zyxel NAS flaw

Wikileaks founder Julian Assange is free

CISA confirmed that its CSAT environment was breached in January.

Threat actors compromised 1,590 CoinStats crypto wallets

Experts observed approximately 120 malicious campaigns using the Rafel RAT

LockBit claims the hack of the US Federal Reserve

Ransomware threat landscape Jan-Apr 2024: insights and challenges

ExCobalt Cybercrime group targets Russian organizations in multiple sectors

Threat actor attempts to sell 30 million customer records allegedly stolen from TEG

Security Affairs newsletter Round 477 by Pierluigi Paganini – INTERNATIONAL EDITION

Threat actors are actively exploiting SolarWinds Serv-U bug CVE-2024-28995

International Press – Newsletter

Cybercrime  

Hacker claims to have 30 million customer records from Australian ticket seller giant TEG   

US convicts crypto-robbing gang leader who kidnapped victims before draining their accounts

Evolve Bank Data Leaked After LockBit’s ‘Federal Reserve Hack’  

4 FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree

Malware

ExCobalt: GoRed, the hidden-tunnel technique  

RAFEL RAT, ANDROID MALWARE FROM ESPIONAGE TO RANSOMWARE OPERATIONS  

Decoding the Caesar Cipher Skimmer  

From Dormant to Dangerous: P2Pinfect Evolves to Deploy New Ransomware and Cryptominer

Medusa Reborn: A New Compact Variant Discovered     

Hacking

Chemical Security Assessment Tool (CSAT) Ivanti Notification  

Auth. Bypass In (Un)Limited Scenarios – Progress MOVEit Transfer (CVE-2024-5806)  

Polyfill Domain Shut Down as Owner Disputes Accusations of Malicious Activity

Intelligence and Information Warfare 

Russian National Charged for Conspiring with Russian Military Intelligence to Destroy Ukrainian Government Computer Systems and Data

Largest Croatian hospital under cyberattack    

Russian APT Reportedly Behind New TeamViewer Hack    

Kimsuky deploys TRANSLATEXT to target South Korean academia  

Chinese and N. Korean Hackers Target Global Infrastructure with Ransomware

Cybersecurity  

Perplexity Plagiarized Our Story About How Perplexity Is a Bullshit Machine   

Sanctions Six Russian Hackers 

Pierluigi Paganini

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

(SecurityAffairs – hacking, newsletter)