An initial access broker (IAB) linked to multiple ransomware families has been using a new remote access trojan (RAT) in recent attacks, Broadcom’s Symantec and Carbon Black threat hunter team reports. The threat actor, tracked as Woodgnat and KongTuke, and… Read More "New ‘Mistic’ RAT Opens Door to Several Ransomware Families"
Microsoft, law enforcement, and several cybersecurity companies have collaborated to take down infrastructure shared by two widely used malware families: Amadey and StealC. The action, part of the long-running Operation Endgame, involved the use of AI, legal action, and the… Read More "Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware"
A third man charged for his role in a 2022 hacking attack on the sports and betting website DraftKings has been sentenced to prison, the Justice Department announced on Tuesday. The DOJ has not named the targeted site, describing it… Read More "Third DraftKings Hacker Sentenced to 18 Months in Prison"
A Russian initial access broker (IAB) is targeting over 430,000 FortiGate firewalls as part of the FortiBleed credential-harvesting campaign, SOCRadar reports. Discovered last week, the campaign has been ongoing since at least February, and was initially believed to be Fortinet-exclusive.… Read More "Russian Initial Access Broker Behind FortiBleed Campaign"
Abdellah Belmili, a 26-year-old Algerian national, was recently arrested in Spain and extradited to the United States, where he faces up to 30 years in prison for allegedly running two cybercrime marketplaces. According to the US Justice Department, Belmili, also… Read More "Algerian Man Extradited to US for Running Cybercrime Marketplaces"
A Ukrainian national pleaded guilty in a US court to his role in the notorious Conti ransomware group, the Department of Justice announced. The man, Oleksii Oleksiyovych Lytvynenko, 44, of Cork, Ireland, was arrested in Ireland in 2023 and was… Read More "Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges"
