Tag

Cyber Espionage

All articles tagged with #cyber espionage

cybersecurity13 days ago

Massive Browser Extension Malware Campaigns Expose Global Cybersecurity Threats

The DarkSpectre threat actor, linked to China, has exposed a series of malicious browser extensions across Chrome, Edge, and Firefox, affecting over 8.8 million users worldwide. These extensions, including ShadyPanda, GhostPoster, and The Zoom Stealer, are designed for data theft, corporate espionage, and meeting information harvesting, often masquerading as legitimate tools for video conferencing and utilities. The campaigns have been active for over seven years, with some extensions still in the trust-building phase, posing significant risks to user privacy and corporate security.

cybersecurity5 months ago

North Korean Hackers Use JPEG Files to Bypass Windows Security

North Korea's APT37 group is using sophisticated malware embedded in JPEG images and leveraging steganography to evade detection and attack Windows systems, primarily in South Korea. The malware employs multi-stage shellcode injection, fileless techniques, and cloud API abuse for command and control, highlighting the need for advanced behavioral detection and proactive security measures.

cybersecurity1 year ago

U.S. Urges Encrypted Apps Amid Chinese Telecom Hacks

A Chinese hacking group known as "Salt Typhoon" has stolen a significant amount of Americans' metadata in a cyber-espionage campaign, according to a senior US official. The hackers targeted multiple telecommunications companies, including Verizon, AT&T, and T-Mobile, although some companies reported no customer data compromise. The stolen metadata, which includes call records but not content, can reveal detailed personal information. The US government, prioritizing the issue, has briefed President Biden and held a classified briefing for senators on the matter.

cybersecurity1 year ago

Russian Hackers Exploit Zero-Day Flaws in Firefox and Windows

A Russian hacking group, identified as "RomCom," has exploited two zero-day vulnerabilities to target Firefox and Tor browser users on Windows PCs, primarily in Europe and North America. The attacks, which began in October, involve a malicious web page that installs a backdoor on victims' PCs without user interaction. The vulnerabilities, CVE-2024-9680 and CVE-2024-49039, have been patched by Mozilla, Tor, and Microsoft. However, users who haven't updated remain at risk. ESET links these attacks to RomCom's previous exploits.

cybersecurity1 year ago

US Warns of Escalating Cyber Threat from Chinese Hackers

Chinese hackers are reportedly embedding themselves in U.S. critical infrastructure to gain an advantage in potential conflicts, according to Morgan Adamski of U.S. Cyber Command. This follows a significant cyberespionage operation, "Salt Typhoon," which targeted U.S. telecommunications, compromising call records and communications of key officials. The Chinese government denies involvement, and the Chinese Embassy has not commented on the allegations.

cybersecurity1 year ago

Russian Spies Exploit Wi-Fi for Unprecedented Network Hopping Hack

Russian military hackers, part of the GRU, have developed a novel Wi-Fi hacking technique called a "nearest neighbor attack," allowing them to breach networks remotely without leaving Russian soil. This method involves hacking into a nearby network and using its devices to access the target network, as discovered by cybersecurity firm Volexity during a 2022 investigation in Washington, DC. The attack highlights the evolving threat of cyber espionage and the need for enhanced Wi-Fi security measures.

cybersecurity1 year ago

T-Mobile Breach Tied to Chinese State-Sponsored Hackers

T-Mobile has been targeted by a cyber-espionage campaign linked to Chinese state-sponsored hackers known as Salt Typhoon, which also affected other major U.S. telecom providers. The breach focused on wiretap systems used for law enforcement surveillance, compromising sensitive communications involving high-ranking U.S. officials. While T-Mobile reports no significant impact on customer data, the incident underscores vulnerabilities in the telecommunications sector and the need for enhanced security measures. T-Mobile is collaborating with federal authorities to address the breach.

cybersecurity1 year ago

Chinese Hackers Breach T-Mobile in Major Telecom Espionage

T-Mobile was among several telecommunications companies targeted in a Chinese cyber-espionage operation, according to The Wall Street Journal. Hackers linked to a Chinese intelligence agency breached T-Mobile's network to spy on high-value intelligence targets. While T-Mobile claims no significant impact on its systems or customer data, the FBI and CISA reported that China-linked hackers intercepted surveillance data from U.S. telecom companies. Beijing has denied these hacking allegations.

cybersecurity1 year ago

FBI and CISA Warn of Extensive Chinese Cyber-Espionage on US Telecoms

The FBI and CISA have identified a significant cyber espionage campaign by the People's Republic of China targeting U.S. telecommunications infrastructure. PRC-affiliated actors have compromised networks at multiple telecom companies, stealing customer call records and private communications, particularly of individuals involved in government or political activities. The agencies are providing technical assistance and sharing information to help potential victims and strengthen cyber defenses. Organizations suspecting they are affected are urged to contact their local FBI field office or CISA.