yaracroft @venom@nanao.cybtex.fr

25 malicious packages in the npm repository. We were surprised to see an interesting case of #malware authors targeting other malware authors. Hackers are still continuing to abuse npm with the goal of high ROI attacks, since the effort of developing and publishing a malicious package is so low. We estimate this trend will only continue to increase. #npm #discord #informatique

https://jfrog.com/blog/malware-civil-war-malicious-npm-packages-targeting-malware-authors/

An unusual XSS vulnerability in the Horde webmailer. The vulnerability allows an attacker to craft a malicious OpenOffice document that, when previewed as an email attachment, enables an attacker to steal all emails from the victim. Since there is no official patch available yet, we highly recommend to disable the affected feature #vuln #informatique

https://blog.sonarsource.com/horde-webmail-account-takeover-via-email

A group, called Anonymous Liberland and the Pwn-Bär Hack Team, claim to have breached Belarusian weapons firm. Tetraedr has operated since 2001 and offers missile and gun systems, air defense and surveillance radar systems.

• 200 gigabytes of emails and schematics from the Belarusian weapons manufacturer Tetraedr.

https://ddosecrets.substack.com/p/limited-distribution-tetraedr-222

🇫🇷 La CNIL lance une plateforme afin de suivre et identifier en temps réel les problématiques relatives à la protection des données des électeurs pour l'élection présidentielle 2022. #france #informatique

https://demarche.services.cnil.fr/signalement-elections/

Les opérateurs Snatch revendiquent une attaque informatique relative au groupe McDonald's Corporation.

#usa #ransomware #snatch #databreach #food

🇨🇦 L'Aluminerie Alouette (alouette.com), à Sept-Îles, la plus grande aluminerie des Amériques, victime d'une panne majeure qui affecte l'ensemble de ses systèmes informatiques. #canada #industrial #ransomware #cyber #threats #databreach #informatique

https://www.journaldequebec.com/2022/02/25/laluminerie-alouette-possiblement-ciblee-par-une-cyberattaque-1

🇺🇸 U.S microchip powerhouse Nvidia hit by cyber attack, parts of its business are « completely compromised ». « We are investigating an incident. We don't have any additional information to share at this time. » #usa #chips #russia #cyber #nvidia #semiconductors #networks #business #incident #technology #software #electronic #chips #industry #technologies #solutions #threats #network #informatique

https://www.telegraph.co.uk/business/2022/02/25/us-microchip-powerhouse-nvidia-hit-cyber-attack/

New version of the IcedID GzipLoader component which is distributed since the beginning of February 2022. This version introduces new anti-analysis techniques, whereas it is functionally equivalent to previous versions, except for the removal of the SSL-pinning feature. #malware #botnet #cyber #threats #informatique

https://threatray.com/blog/a-new-icedid-gziploader-variant/

🇫🇷 Un des premiers centres régionaux de cybersécurité de France ouvrira ses portes en septembre 2022 en Bourgogne. La convention signée ce jeudi 24 février 2022 entre la région Bourgogne-Franche-Comté, l'ARNIA et l'ANSSI. Si depuis quelques heures le « cyberterrorisme » prend une autre dimension avec la guerre en Ukraine, le phénomène est largement rependu sur le territoire français et à toutes les échelles. Les attaques sont généralement menées par des groupes ou individus isolés, afin de demander une rançon. La Bourgogne-Franche-Comté est bien placée pour le savoir puisqu'elle en a fait les frais en 2021 avec plusieurs intrusions, notamment sur les hôpitaux de Villefranche-sur-Saône et de Dax. #france #cyber #malware #city #ransomware #smart #threats #informatique

https://france3-regions.francetvinfo.fr/bourgogne-franche-comte/cote-d-or/dijon/bourgogne-un-centre-regional-pour-lutter-contre-les-cyberattaques-operationnel-en-septembre-2022-2474635.html

🎙️ Stéphane Boujnah, patron d'Euronext, redoute des cyberattaques d'une nature inédite. Chaque dirigeant d'entreprise et même chaque ménage doit prendre des précautions pour renforcer la sécurité de ses systèmes d'information. Qu'ils soient modestes, de bureautique, ou plus significatifs, liés à la production, ou plus systémiques, liés au cœur de l'activité. #france #cyber #business #threats #informatique

https://media.radiofrance-podcast.net/podcast09/14072-24.02.2022-ITEMA_22943228-2022I22955S0055-21.mp3

🇵🇹 Cibercriminosos Lapsus$ Group ameaçaram esta quinta-feira revelar informação dos grupos Impresa, Vodafone Portugal e da T-Mobile, que recentemente foram alvo de ciberataques, colocando à votação dos utilizadores qual o primeiro a ser alvo. #portugal #telecom #blackout #cyber #threats #informatique

https://observador.pt/2022/02/24/lapsus-group-ameaca-revelar-informacao-de-impresa-vodafone-e-t-mobile/

A new form of disk-wiping malware was used to attack organizations in 🇺🇦 Ukraine shortly before the launch of a Russian invasion this morning (February 24). Symantec, a division of Broadcom Software, has also found evidence of wiper attacks against Windows computers in 🇱🇹 Lithuania. Sectors targeted included organizations in the financial, defense, aviation, and IT services sectors. #microsoft #malware #windows #powershell #cyber #wiper #disruptive #threats #ransomware #government #outage #informatique

https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/ukraine-wiper-malware-russia

Russia's invasion of Ukraine has paved the way for a new battlefront with the West in cyberspace.

U.S and UK governments this week warned of Russia-linked #malware called Cyclops Blink, which can infect #network equipment to attack downstream devices in key targets.

Mandiant's McNamara is keeping a close watch on a possible cyber threat from Russia-linked hacking group Temp.Isotope, which also been referred to as Berserk Bear, or Energetic Bear.

#usa #uk #cyber #warfare #russia #ukraine #threats #networks #informatique

https://www.theregister.com/2022/02/24/cyberwarfare_russia_ukraine/

🇮🇷 MuddyWater is conducting cyber #espionage and other malicious cyber operations as part of Iran's Ministry of Intelligence and Security (MOIS), targeting a range of government and private-sector organizations across sectors—including telecommunications, defense, local government, and oil and natural gas—in Asia, Africa, Europe, and North America. #usa #uk #iran #defense #government #telecom #espionage #cyber #malware #threats #informatique

https://www.cisa.gov/uscert/ncas/current-activity/2022/02/24/iranian-government-sponsored-muddywater-actors-conducting