hacking

DISMANTLED: Russian ‘RSocks botnet’ down after hacking millions of devices

3 min read

DISMANTLED: Russian ‘RSocks botnet’ down after hacking millions of devices

RiSec.Mitch 17 June 2022

The U.S. Department of Justice has announced the disruption of the Russian RSocks malware botnet used to hijack millions of computers, Android smartphones, and IoT (Internet of Things) devices worldwide for use as proxy servers. The law enforcement operation involved the FBI and police forces in Germany, the Netherlands, and the United Kingdom, where the botnet maintained parts of its infrastructure. What is a botnet? A botnet is a swarm of devices that threat actors can remotely control to perform various behaviour, including DDoS attacks, crypto mining, and deploying...

U.S. Charges 4 Russian Gov Employees Over Hacking Critical Infrastructure Worldwide

2 min read

Cybersecurity News

U.S. Charges 4 Russian Gov Employees Over Hacking Critical Infrastructure Worldwide

RiSec.n0tst3 25 March 2022

The U.S. government on Thursday released a cybersecurity advisory outlining multiple intrusion campaigns conducted by state-sponsored Russian cyber actors from 2011 to 2018 that targeted the energy sector in the U.S. and beyond. “The [Federal Security Service] conducted a multi-stage campaign in which they gained remote access to U.S. and international Energy Sector networks, deployed ICS-focused malware, and collected and exfiltrated enterprise and ICS-related data,” the U.S. government said, attributing the attacks to an APT actor known as Energetic Bear. In addition, the Justice Department charged four Russian government employees, including three officers...

Russia vs Ukraine – The War in Cyberspace

4 min read

Russia vs Ukraine – The War in Cyberspace

RiSec.n0tst3 28 February 2022

Russian troops have launched a major assault on Ukraine and while their forces battle in the physical world for control over various cities and regions, a battle is also taking place in cyberspace. Just before Russia launched an invasion of Ukraine on February 24, Ukrainian government websites were disrupted by distributed denial-of-service (DDoS) attacks, and cybersecurity firms reported seeing a new piece of destructive malware on hundreds of devices in the country. The malware used in this attack has been named HermeticWiper and it has been described by experts as a wiper malware disguised as...

LockBit Ransomware, FBI Issues Flash Warning Alert

4 min read

Cybersecurity News

LockBit Ransomware, FBI Issues Flash Warning Alert

RiSec.n0tst3 5 February 2022

The FBI released a flash alert containing technical details associated with the LockBit ransomware operation. The Federal Bureau of Investigation (FBI) has issued a flash alert containing technical details and indicators of compromise associated with LockBit ransomware operations. The LockBit ransomware gang has been active since September 2019, in June 2021 the group announced the LockBit 2.0 RaaS. Like other ransomware gangs, Lockbit 2.0 determines the system anduser language settings and only targets those not matching a set list of languages that areEastern European. After ransomware ads were banned on hacking forum, the LockBit operators...

Google Details Two Zero-Day Bugs Reported in Zoom Clients and MMR Servers

3 min read

Google Details Two Zero-Day Bugs Reported in Zoom Clients and MMR Servers

RiSec.n0tst3 20 January 2022

An exploration of zero-click attack surface for the popular video conferencing solution Zoom has yielded two previously undisclosed security vulnerabilities that could be exploited to crash the service, execute malicious code, and even leak arbitrary areas of its memory. Natalie Silvanovich of Google Project Zero, who discovered and reported the two flaws last year, said the issues impact both Zoom clients and Multimedia Router (MMR) servers, which transmit audio and video content between clients in on-premise deployments. The weaknesses have since been addressed by Zoom as part of updates shipped on November 24, 2021. The goal of...