Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow|GuardFall Flaw Hits 10 of 11 Popular Open-Source AI Agents|XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t|U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog|Europe Confirms Record €4.1B Penalty Against Google for Android Practices|U.S. CISA adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog|430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link|Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic|Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges|Oracle E-Business Suite Flaw Under Active Attack, 950 Systems Exposed|Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs|CISA Warns BlueHammer Flaw Is Now Exploited in Ransomware Attacks|RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow|GuardFall Flaw Hits 10 of 11 Popular Open-Source AI Agents|XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t|U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Coronavirus-themed attacks April 05 – April 11, 2020

In this post, I decided to share the details of the Coronavirus-themed attacks launched from April 05 to April 11, 2020. Threat actors exploit the interest in the Coronavirus outbreak while infections increase worldwide, experts are observing new campaigns on a daily bases. Below a list of attacks detected this week. April 09 – Phishers […]

Oxford University Lab

In this post, I decided to share the details of the Coronavirus-themed attacks launched from April 05 to April 11, 2020.

Threat actors exploit the interest in the Coronavirus outbreak while infections increase worldwide, experts are observing new campaigns on a daily bases.

Below a list of attacks detected this week.

April 09 – Phishers prefer Tesla, top 3 malware strains in COVID19 phishing campaigns

Group-IB’s CERT-GIB analyzed hundreds of COVID19-related phishing emails and discovered top malware strains in COVID-19 campaigns

April 09 – Less than 2% of all daily malspam are COVID19-themed attacks, Microsoft reports

Microsoft shares new threat intelligence, the IT giant pointed out that malspam activities have not increased due to COVID19 outbreak.

April 09 – Australian Signals Directorate (ASD) is hacking crooks behind COVID19-themed attacks

The Australian government will use any means to crack down on cybercriminals exploiting the COVID19 outbreak, including hacking back.

April 08 – NASA warns of a significant increase in cyber attacks during COVID19 outbreak

This week, NASA sent out a memo to its personnel warning of a significant increase in the cyberattacks during the COVID19 outbreak.

April 08 – Maze ransomware gang discloses data from drug testing firm HMR

The drug testing firm Hammersmith Medicines Research LTD (HMR), which performs live trials of COVID19 vaccines, discloses a data breach.

April 07 – COVID19: Europol arrests man behind €6M face masks and hand sanitisers scam

While crooks continue to exploit the Coronavirus outbreak, the Europol announced to have arrested a man involved in COVID19 business scams.

April 07 – Interpol warns that crooks are increasingly targeting hospitals

While the Coronavirus outbreak is threatening the world, the INTERPOL warns that crooks are increasingly targeting hospitals with ransomware.

If you are interested in COVID19-themed attacks from February 1 give a look at the following posts:

https://securityaffairs.co/wordpress/99682/cyber-warfare-2/coronavirus-themed-attacks.html
https://securityaffairs.co/wordpress/100187/cyber-crime/coronavirus-themed-attacks-2.html
https://securityaffairs.co/wordpress/100698/hacking/coronavirus-themed-attacks-march-22-march-28-2020.html
https://securityaffairs.co/wordpress/101081/security/coronavirus-themed-attacks-mar-29-apr-4-20.html
[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – malware, COVID19)

[adrotate banner=”5″]

[adrotate banner=”13″]