Cyber Attacks

PyRoMineIoT malware infects systems with a Monero miner, spreads using RCE EternalRomance by removing or modifying accounts and passwords with privileged access, and scans for vulnerable Internet of Things devices for possible future attacks.

Online genealogy platform MyHeritage calls for all users to change their passwords after learning of a breach that occurred in October 2017.

Equifax submitted a report outlining the extent of the 2017 data breach of their systems, stating that hackers stole approximately 2.4 million PII and document scans.

An update of the Spectre attacks called SgxPectre can obtain data from Intel's SGX enclaves, which are supposedly secure repositories for sensitive and valuable data.

Attackers abuse memcached servers to cause the biggest DDoS attack recorded. The target-- software development platforms GitHub-- was down for only 10 minutes.

A new ransomware called BlackRuby was discovered with a unique feature: besides encrypting files for ransom, it also installs a Monero cryptominer.

Two cryptocurrency incidents made the news recently: one concerning a new campaign from the threat actor known as the Lazarus Group, and the other involving a scam by one of the many new cryptocurrency startups.

Few cybercrime groups throughout history have had as much disruptive power and lasting impact as the Lazarus Group. The group has had multiple operations over the years, most of which involve either disruption, sabotage, financial theft or espionage.

Activists have traditionally used physical signs and catchy slogans to promote their political agenda, but the internet offers a significantly broader audience, so these activities have since moved online.