Security News | HKCERT

Decryptor released for Maze, Egregor, and Sekhmet ransomware strains

Someone connected to the ransomware group released decryption keys in a BleepingComputer forum.

ZDnet 10 Feb 2022 446 Views

UK, US, Australia issue joint advisory: Ransomware on the loose, critical national infrastructure affected

Don't pay extortionists? Firms shelled out $5bn in Bitcoin in 6 months Ransomware attacks are proliferating as criminals turn to gangs providing turnkey post-compromise services, Britain's National Cyber Security Centre (NCSC) has warned.…

The Register 10 Feb 2022 11507 Views

Brute-forcing passwords, ProxyLogon exploits were some of 2021's most popular attack methods

Log4j also became a top pick for exploitation after the discovery of a critical RCE flaw.

ZDnet 9 Feb 2022 370 Views

Free decryptor released for TargetCompany ransomware victims

Czech cybersecurity software firm Avast has released a decryption utility to help TargetCompany ransomware victims recover their files for free.

BleepingComputer 8 Feb 2022 905 Views

LockBit, BlackCat, Swissport, Oh My! Ransomware Activity Stays Strong

Law enforcement, C-suite executives and the cybersecurity community at-large have been laser-focused on stopping the expensive and disruptive barrage of ransomware attacks — and it appears to be working, at least to some extent. Nonetheless, recent moves from the LockBit...

Threatpost 8 Feb 2022 530 Views

$4.4 million stolen in attack on blockchain infrastructure Meter

The Meter and Moonriver networks were affected by the cyberattack.

ZDnet 6 Feb 2022 327 Views

New Argo CD Bug Could Let Hackers Steal Secret Info from Kubernetes Apps

Users of the Argo continuous deployment (CD) tool for Kubernetes are being urged to push through updates after a zero-day vulnerability was found that could allow an attacker to extract sensitive information such as passwords and API keys. The flaw, tagged as CVE...

The Hacker News 6 Feb 2022 1096 Views

Windows vulnerability with new public exploits lets you become admin

A security researcher has publicly disclosed an exploit for a Windows local privilege elevation vulnerability that allows anyone to gain admin privileges in Windows 10.

Bleepingcomputer 31 Jan 2022 964 Views

105 million Android users targeted by subscription fraud campaign

A premium services subscription scam for Android has been operating for close to two years. Called ‘Dark Herring’, the operation used 470 Google Play Store apps and affected over 100 million users worldwide, potentially causing hundreds of millions of USD in total losses.

Bleepingcomputer 28 Jan 2022 980 Views

AirTag use in theft and stalking incidents prompts Apple to update its Personal Safety User Guide

Apple's diminutive trackers have increasingly shown up in news reports around stalking and thefts. The company's updated safety guide includes new information on what to do if you find an unknown AirTag that might be involved in criminal activity.

ZDnet 27 Jan 2022 470 Views