Cyber World News

US hard liquor giant Brown-Forman is the latest high-profile victim of ransomware criminals. Even if the company’s name doesn’t ring a bell, some of its products are well-known to spirits drinkers worldwide: Brown-Forman is a multi-billion dollar business that owns Jack Daniel’s whiskey, Finlandia vodka, and other global brands. It’s a multi-billion dollar business, headquartered in Louisville, Kentucky – a US state that’s famous for American whiskey, better known as bourbon – and you can see why today’s big-money ransomware crooks might go after a company of that size and sort. According to the business media site Bloomberg, which claims to have received an anonymous tip-off from the crooks behind the attacks, the ransomware crooks involved are the infamous REvil or Sodinokibi gang. The REVil crew make up one of what you might call a “new wave” of ransomware operators who practice three-stage attacks that end in double-barrelled blackmail: First, they break into a victim’s network and...

  BREAKING: Massive hack hits Reddit. A massive hack has hit Reddit today after tens of Reddit channels have been hacked and defaced to show messages in support of Donald Trump's reelection campaign. The hacks are still ongoing at the time of writing, but we were told Reddit's security team is aware of the issue and has already begun restoring defaced channels. A partial list of impacted channels (subreddits) is available below. This includes Reddit channels for the NFL, many TV shows, The Pirate Bay, Disneyland, Disney's Avengers, several city channels, and more. Combined, the channels have tens of millions of subscribers. r/NFL r/CFB  (US College Football) r/TPB (The Pirate Bay's Reddit channel) r/BlackMirror  (TV show) /r/Buffy  (TV show) r/Avengers  (Movie franchise) r/Vancouver (city) r/Dallas (city) r/Plano (city) r/Japan r/Gorillaz  (music band) r/Podcasts /r/Disneyland r/49ers  (NFL team) /r/BostonCeltics  (NBA team) r/Leafs (Toronto Mappl...

Recently, the US and UK cybersecurity agencies have issued a joint security alert about an ongoing malware attack. The QSnatch malware is actively targeting QNAP devices and has infected thousands of them already.   Users must ensure updating their devices with security fixes to avoid exploitation. US UK Cybersec Warn Of QSnatch Malware In a joint alert from the United States Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC) have warned of active QSnatch malware attacks. Briefly, they presented their findings regarding a new strain of QSnatch malware. While the malware vector remains unknown, the firms believe that it attacks a vulnerable device as the malicious code runs with it. The malware affects the device firmware whilst allowing the attacker to connect with the C&C by using a domain generation algorithm (DGA).  It keeps generating different domain names to communicate with the C&C. QSnatch exhi...

The 'Happy Independence Day' message was shown on the channel in Pakistan around 3:30 pm. A leading Pakistan TV news channel, Dawn, has reportedly been hacked, several photos and videos surfacing online showed. While an advertisement was running on the news channel, the Indian flag appeared over it with a message saying 'Happy Independence Day'. This was spotted by many Twitter users. The message was shown on the channel in Pakistan around 3:30 pm. News Jockey @jockey_news Dawn news channels of Pakistan hacked by Hackers https:// twitter.com/doctoralihamid /status/1289884543084834816/video/1 … 6:46 PM · Aug 2, 2020 56 22 people are Tweeting about  Meanwhile, Dawn News put out a tweet in Urdu saying "The Dawn administration has ordered an immediate investigation into the matter." Issuing a statement, Dawn News said that it was broadcasting as usual when the Indian tricolour and the Independence Day wish appeared over the commercial suddenly, remained on the sc...

North Korean hackers return to actively deploying ransomware after the huge WannaCry debacle. Antivirus maker Kaspersky said in a report today that hackers associated with the North Korean regime are behind a new ransomware strain known as VHD. The report details two incidents to which Kaspersky was privy, where intruders gained access to companies' networks and deployed the VHD ransomware. Kaspersky experts say that tools and techniques used during the two intrusions link the attackers to Lazarus Group -- a generic name given to hackers working for the Pyongyang regime. This included: the use of the MATA (Dacls) malware framework to deploy VHD as a final payload the use of techniques to move across a victim's internal network that were previously observed in past Lazarus campaigns "The data we have at our disposal tends to indicate that the VHD ransomware is not a commercial off-the-shelf product; and as far as we know, the Lazarus group is the sole owner of the MATA fram...

Chinese state-sponsored hacking group targets India and Hong Kong with a unique phishing attack designed to convince the target. The campaign uses multiple documents with the filename ‘Mail security check’ and “Boris Johnson Pledges to Admit 3 Million From Hong Kong” in the attack. The document with the name ‘Mail security check’ targets India and the document with “Boris Johnson Pledges to Admit 3 Million From Hong Kong” targeting Hongkong. According to Malwarebytes  analysis , this new campaign is operated by a Chinese state-sponsored actor, who has been active since at least 2014. Spear-Phishing to Install MgBot Malware The campaigns found to be active since July 2, in the first campaign attacker group uses the Cobalt Strike variant delivered through a weaponized word document. A day after the first attack the APT group changed their template to drop, a loader called MgBot that make use of Application Management (AppMgmt) Service on Windows to deliver the final payload. The camp...