Cybersecurity News & Trends – 04-23-21
This week hackers ramped up attacks on office workers, with malicious emails impersonating Slack, BaseCamp and Bloomberg Industry Group.
SonicWall in the News
The 8 Best Wireless Routers for Business in 2021 — Solutions Review
- SonicWall SOHO 250 was included on Solutions Review’s (alphabetically organized) list of the top wireless routers of 2021.
Higher the Factors, Stronger the Security — Security MEA
- Mohamed Abdallah, SonicWall regional director for MEA, explores the importance of multi-factor authentication.
Saudi GDP Can Spike Automation — Khaleej Times
- Mohamed Abdallah, SonicWall regional director for MEA, discusses digital transformation initiatives in Saudi Arabia and the need for intelligent automation deployments.
Industry News
Apple Targeted in $50 Million Ransomware Hack of Supplier Quanta — Bloomberg
- The REvil ransomware group is threatening Apple after one of its key MacBook suppliers, Quanta, allegedly refused to pay a $50 million ransom.
Hackers pose as Bloomberg employees in email scam — Cyberscoop
- The ruse seeks to capitalize on the influence of Bloomberg Industry Group, whose analysis major corporations use to track markets.
Japan says Chinese military likely behind cyberattacks — The Washington Times
- Tokyo police are investigating cyberattacks on about 200 Japanese companies and research organizations, including the country’s space agency, by a hacking group believed to be linked to the Chinese military.
US takes steps to protect electric system from cyberattacks — The Washington Times
- The initiative encourages power plants and electric utilities to improve their ability to identify cyber threats, including implementing technologies to spot and respond to intrusions in real time.
Fake Microsoft Store, Spotify sites spread info-stealing malware — Bleeping Computer
- Sites that impersonate the Microsoft Store, Spotify, and an online document converter are using malware to steal credit cards and passwords saved in web browsers.
Millions of web surfers are being targeted by a single malvertising group — Ars Technica
- Hackers have compromised more than 120 ad servers over the past year in an ongoing campaign that displays malicious advertisements on sites that seem completely benign.
Discord Nitro gift codes now demanded as ransomware payments — Bleeping Computer
- A new ransomware calling itself “NitroRansomware” encrypts victims’ files and then demands a Discord Nitro gift code in exchange for decryption.
Ryuk ransomware operation updates hacking techniques — Bleeping Computer
- Recent attacks from Ryuk ransomware operators show that the actors have a new preference when it comes to gaining initial access to the victim network.
BazarLoader Malware Abuses Slack, BaseCamp Cloud — Threat Post
- The BazarLoader malware’s email messages leverage worker trust in collaboration tools like Slack and BaseCamp to get them to click links containing malware payloads.
Did Someone at the Commerce Dept. Find a SolarWinds Backdoor in Aug. 2020? — Krebs on Security
- On Aug. 13, 2020, someone uploaded a suspected malicious file to VirusTotal, a service that scans submitted files against more than five dozen antivirus and security products. Last month, Microsoft and FireEye identified that file as a newly discovered fourth malware backdoor used in the sprawling SolarWinds supply-chain hack.
Cyberattack on UK university knocks out online learning, Teams and Zoom — ZDNet
- The attack cancelled all live online teaching for the rest of the week.
How the Kremlin Provides a Safe Harbor for Ransomware — Security Week
- Ransomware is crippling local governments, hospitals, school districts and businesses by scrambling their data files until they pay up — and law enforcement has been largely powerless to stop it.
Swinburne University confirms over 5,000 individuals affected in data breach— ZDNet
- The university confirmed the personal information included in the breach contained names, email addresses and phone numbers of staff, students and external parties.
HackBoss malware poses as hacker tools on Telegram to steal digital coins — Bleeping Computer
- The authors of a cryptocurrency-stealing malware are distributing it over Telegram to aspiring cybercriminals under the guise of free malicious applications.
In Case You Missed It
- A Look Back: SonicWall Reflects on its 42nd CRN Award — Lindsey Lockhart
- Cybercrime on Campus: How Education Became Attackers’ Biggest Target — Amber Wolff
- Understanding the Difference Between Azure Firewall Services and SonicWall NSv — Stefan Brunner
- Clear and Present Danger: Why Cybersecurity is More Critical than Ever — Debasish Mukherjee
- Emotet and Trickbot: The Battle of the Botnets — Amber Wolff
- The Definitive Guide to SASE — Sony Kogin
