<img src="https://secure.ruth8badb.com/159098.png" alt="" style="display:none;">

IT Security Newsletter - 2/24/2023

SHARE

Top News

Dole hit by ransomware, North America operations briefly disrupted

Dole was recently hit by ransomware, the company said Wednesday, but the incident had a limited impact on its operations. The company released the statement following a CNN report saying Dole had to temporarily shut down food production plants in North America and suspend food shipments to grocers, citing a company memo sent to grocery stores. In the statement, Dole said it quickly moved to contain the threat and brought in third-party cybersecurity experts to help remediate the issue. READ MORE...

Breaches

TELUS investigating leak of stolen source code, employee data

Canada's second-largest telecom, TELUS is investigating a potential data breach after a threat actor shared samples online of what appears to be employee data. The threat actor subsequently posted screenshots that apparently show private source code repositories and payroll records held by the company. TELUS has so far not found evidence of corporate or retail customer data being stolen and continues to monitor the potential incident. READ MORE...

Hacking

Hydrochasma Threat Group Bombards Targets With Slew of Commodity Malware, Tools

A previously unknown threat actor that exclusively uses a slew of publicly available and living-off-the-land tools has been targeting Asia-based shipping companies and medical laboratories in an intelligence-gathering operation since October, researchers have found. Dubbed Hydrochasma by researchers at Symantec, which is owned by Broadcom Software, the group as yet does not appear to have stolen any data, but seems to target industries that are involved in COVID-19-related treatments or vaccines. READ MORE...


Ukraine invasion blew up Russian cybercrime alliances

The so-called "brotherhood" or Russian-speaking cybercriminals is yet another casualty of the war in Ukraine, albeit one that few outside of Moscow are mourning. As the illegal invasion hits the one-year mark, new research suggests the conflict also disrupted Russia and the former Soviet Union's criminal ecosystem, which has "far-reaching consequences affecting nearly every aspect of cybercrime," according to Alexander Leslie, associate threat intelligence analyst for Recorded Future's Insikt Group. READ MORE...

Malware

Pirated Final Cut Pro infects your Mac with cryptomining malware

Security researchers discovered a cryptomining operation targeting macOS with a malicious version of Final Cut Pro that remains largely undetected by antivirus engines. They found that the malicious variant was distributed over torrent and executed the XMRig utility that mines for Monero cryptocurrency. The Jamf Threat Labs team found this particular macOS threat and tracked it to malicious torrents shared over The Pirate Bay by a user named wtfisthat34698409672. READ MORE...


BlackCat ransomware targets another healthcare facility

In a statement issued Monday morning, Lehigh Valley Health Network said it had been the target of a cyberattack attributed to a ransomware gang known as BlackCat. The Network is made up of 13 hospital campuses, as well as other health facilities, and is based in Pennsylvania. The ransomware-as-a-service (RaaS) group BlackCat, also known as ALPHV and Noberus, is currently one of the most active groups, and has been associated with Russia. READ MORE...

Exploits/Vulnerabilities

A world of hurt for Fortinet and Zoho after users fail to install patches

Organizations around the world are once again learning the risks of not installing security updates as multiple threat actors race to exploit two recently patched vulnerabilities that allow them to infect some of the most critical parts of a protected network. The vulnerabilities both carry severity ratings of 9.8 out of a possible 10 and reside in two unrelated products crucial in securing large networks. READ MORE...

On This Date

  • ...in 1868, the US House of Representatives adopts 11 articles of impeachment against President Andrew Johnson, who was later acquitted in the Senate.
  • ...in 1921, actor Abe Vigoda ("The Godfather," "Barney Miller") is born in Brooklyn, NY.
  • ...in 1955, Apple Computer and Pixar co-founder Steve Jobs is born in San Francisco, CA.
  • ...in 1991, after six weeks of intensive bombing against Iraq and its armed forces, U.S.-led coalition forces launch a ground invasion of Kuwait and Iraq.