A vendors looks at her phone in Hanoi on March 31. (Photo by Nhac Nguyen/AFP via Getty Images) Southeast Asian hacking crew racks up victims, rapidly expands criminal campaign A group called "Dark Pink" is likely based in Southeast Asia and shows signs of development and ongoing activity, researchers say. May 31, 2023 By AJ Vicens
The seals of the U.S. Cyber Command, the National Security Agency and the Central Security Service greet employees and visitors at the campus the three organizations share March 13, 2015 in Fort Meade, Maryland. The National Security Agency today released an advisory to the defense sector detailing APTs. (PHOTO: Chip Somodevilla/Getty Images) Hackers maintained deep access inside military organization’s network, U.S. officials reveal A U.S. government cybersecurity advisory includes details about the sophisticated attack on an unnamed defense industrial base organization. Oct 4, 2022 By Suzanne Smalley
Server room. (Getty Images) U.S., allies warn of rising recent and future attacks on managed service providers The internationally coordinated notice offers specific best practices for MSPs and customers amid warnings of increasing threats. May 11, 2022
The North Korean flag. (Getty Images) North Korea aims ‘TraderTraitor’ malware at cryptocurrency workers The Cybersecurity and Infrastructure Security Agency is attributing the campaign to hackers known as the Lazarus Group. Apr 19, 2022 By Tonya Riley
A man enters the Russian Foreign Ministry headquarters in Moscow on April 19, 2021. (Photo by NATALIA KOLESNIKOVA/AFP via Getty Images) Microsoft seizes internet domains linked to GRU cyberattacks against Ukraine Strontium — a group linked to Russian military intelligence — was using the domains to target Ukrainian institutions, Microsoft said. Apr 8, 2022 By Joe Warminsky
Ethernet cables are seen running from the back of a wireless router in Washington, D.C., on March 21, 2019. (Photo credit should read MANDEL NGAN/AFP via Getty Images) Sandworm-linked botnet has another piece of hardware in its sights The CyclopsBlink malware is now targeting internet routers from hardware maker ASUS, Trend Micro researchers said. Mar 17, 2022 By Joe Warminsky
(Getty Images) Russia-linked Sandworm reportedly has retooled with ‘Cyclops Blink’ The "large-scale modular malware framework" has largely replaced the "VPNFilter" tools that Sandworm used before they were disrupted in 2018. Feb 23, 2022 By Joe Warminsky
An aid convoy from the International Committee of the Red Cross arrives in Syria’s northern region of Afrin on March 1, 2018 (AHMAD SHAFIE BILAL / AFP via Getty Images) Red Cross attributes server breach to nation-state actor The breached data hasn't shown up on the dark web, so far. Feb 16, 2022 By Tonya Riley
A Ukrainian serviceman walks in a snow-covered trench on the front line with Russia-backed separatists near Avdiivka in the Donetsk region on Feb. 3, 2022 (Photo by ANATOLII STEPANOV/AFP via Getty Images) Russia-linked Gamaredon shows signs of possible recent activity in Ukraine, researchers say Amid questions about the most recent cyberattacks on Ukraine a known adversary has been observed launching its own attacks. Feb 4, 2022
The Ukrainian national flag flies during a public celebration for the 30th anniversary of Ukrainian independence, on Aug. 24, 2021 in Lviv, Ukraine. (Photo by Adam Berry/Getty Images) Conversation with a top Ukrainian cyber official: What we know, what we don’t, what it means Cyberattacks against Ukraine continue, even as diplomats work to stave off physical war. Jan 31, 2022