Register

Tag: Powershell

FBI, CISA, MS-ISAC release cybersecurity advisory on emerging Rhysida ransomware targeting critical sectors
FBI, CISA, MS-ISAC release cybersecurity advisory on emerging Rhysida ransomware targeting critical sectors
Following the August alert by the Health Sector Cybersecurity Coordination Center (HC3) in the U.S. Department of Health & Human Services (HHS) regarding the emergence of Rhysida, a new ransomware-as-a-service (RaaS) group, U.S. security agencies have collaborated to release a…
Crambus cyber espionage group exploits PowerShell backdoor to target Middle Eastern government
Crambus cyber espionage group exploits PowerShell backdoor to target Middle Eastern government
Symantec researchers have exposed the operations of the Crambus espionage group (also known as OilRig and APT34), which focuses on infiltrating the Middle Eastern government. These attackers, believed to be linked to Iran, have compromised numerous computers and servers over…
PowerDrop malware exploits PowerShell Script for C&C attacks against US aerospace sector
PowerDrop malware exploits PowerShell Script for C&C attacks against US aerospace sector
A new malicious PowerShell script called PowerDrop targeting the U.S. aerospace defense industry has been discovered by Adlumin Threat Research. Using advanced techniques to evade detection, the novel malware straddles the line between ‘basic off-the-shelf threat’ and tactics used by…
Winter Vivern APT group uses unknown set of espionage campaigns to strike government and private entities
Winter Vivern APT group uses unknown set of espionage campaigns to strike government and private entities
SentinelLabs identified Winter Vivern APT (advanced persistent threat) activity, leveraging observations made by The Polish CBZC and Ukraine CERT. The hacker group employs various tactics, such as phishing websites, credential phishing, and deployment of malicious documents, tailored to the targeted…
Recorded Future finds that BlueBravo hackers utilize Ambassador Lure to spread GraphicalNeutrino malware
Recorded Future finds that BlueBravo hackers utilize Ambassador Lure to spread GraphicalNeutrino malware
Recorded Future’s Insikt Group detailed BlueBravo threat group that overlaps with Russian advanced persistent threat (APT) activity group tracked as APT29 and NOBELIUM, which Western governments and researchers have linked to the Russian Foreign Intelligence Service (SVR). BlueBravo hackers used…

More Tag: Powershell posts:

Cisco Talos detects malicious campaigns using government, union-themed lures offering Cobalt Strike beacons
Cisco Talos detects malicious campaigns using government, union-themed lures offering Cobalt Strike beacons
ESET details Worok cyberespionage group targeting Asian governments, corporations
ESET details Worok cyberespionage group targeting Asian governments, corporations
New advisory warns of hackers routinely exploiting poor security controls and practices for initial access
New advisory warns of hackers routinely exploiting poor security controls and practices for initial access
CISA, FBI provide updates on destructive malware targeting organizations in Ukraine, including WhisperGate malware
CISA, FBI provide updates on destructive malware targeting organizations in Ukraine, including WhisperGate malware
FBI releases new details of BlackCat/ALPHV ransomware, indicating that hackers are still active
FBI releases new details of BlackCat/ALPHV ransomware, indicating that hackers are still active
Proofpoint reveals French entities targeted using open-source package installer Chocolatey
Proofpoint reveals French entities targeted using open-source package installer Chocolatey

Join the Industrial Cyber Community

Get the latest breaking OT/ICS news, access the resources and participate in our ICS Forum.
Register