Home

New wave of attacks hit Ukrainian power industry

The cyberattacks against the Ukrainian electric power industry continue. Background information on this story can be found in our recent publications:

BlackEnergy trojan strikes again: Attacks Ukrainian electric power industry

BlackEnergy by the SSHBearDoor: attacks against Ukrainian news media and electric industry

BlackEnergy and the Ukrainian power outage: What we really know

Recently we discovered a new wave of these attacks, where a number of electricity distribution companies in Ukraine were targeted again following the power outages in December. What’s particularly interesting is that the malware that was used this time is not BlackEnergy, which poses further questions about the perpetrators behind the ongoing operation. The malware is based on a freely-available open-source backdoor – something no one would expect from an alleged state-sponsored malware operator.

: Robert Lipovsky; Cyber Security & e-Crime; Posted On Monday, 30 November -0001 00:00

Security researchers, unhappy with official Bug Bounties, are turning to the Open Bug Bounty project

Major updates and new features challenge crowd-sourcing start-ups for vulnerability reporting

VC-backed Bug Bounty startups lose their battle to non-profit Open Bug Bounty project?

Over 17,500 websites, including such industry giants as Microsoft, Amazon, LinkedIn, eBay, Apple and BBC fixed security vulnerabilities on their websites reported by XSSPosed researchers.

Launched in June 2014, XSSPosed is a non-profit website designed for security researchers to report and help patching vulnerable websites. Since July 2015, XSSPosed offers Open Bug Bounty coordinated vulnerability disclosure program for any website and to any security researcher.

: ILIA KOLOCHENKO,CEO, HIGH-TECH BRIDGE; Cyber Security & e-Crime; Posted On Monday, 30 November -0001 00:00

HMRC scams still a threat to UK

London (UK): As the Self Assessment Tax Return deadline looms in the UK, PhishMe has warned of phishing messages, purporting to be from HM Revenue and Customs (HMRC) circulating. While the number of campaigns* circulating in 2015 has decreased against previous years, the messages themselves still pose a threat due to their sophisticated and devious nature. It's worth noting a recent deviation is, instead of spreading malware, the scammers are trying to directly spoof individuals into handing over their personal information.

: Dulcie McLerie; Cyber Security & e-Crime; Posted On Monday, 30 November -0001 00:00

New Valentines Day Ransomware Campaign

Researchers from Proofpoint have published a new blog about a Valentines Day ransomware campaign they have been tracking.

Victims are targeted via a Valentines Day Promotional Offer email, however when recipients click on the links, a new ransomware variant called 7ev3n is installed on their machine.