LockBit ransomware has long held a dominant position at the forefront of the most active and prevalent threats in the cyber landscape. Since 2019, LockBit has orchestrated numerous attacks targeting entities regardless of their size or global location. Read to learn on how to protect against this.
A vulnerability has been discovered in Check Point Security Gateway Products that could allow for credential access. A Check Point Security Gateway sits between an organization’s environment and the Internet to enforce policy and block threats and malware.
The State and Local Cybersecurity Grant Program is a federal grant program administered by the United States DHS and funded by the IIJA. The goal is to improve the cybersecurity posture of state, local, and territorial government organizations.
The NJCCIC continues to observe social engineering schemes targeting individuals seeking employment, often referred to as job scams. Increases in layoffs and job cuts exacerbate this issue; layoffs in the financial sector alone increased in the first quarter of 2023.
In May 2023, Google launched several new top-level domains (TLDs), including .ZIP. The use of .ZIP for filename extensions and domain names is legitimate; however, threat actors are exploiting the .ZIP domain name in a new phishing technique called “file archiver in the browser.”
FortiSIEM is a multi-tenant SIEM that offers user awareness for threat detection, analysis, and reporting. Vulnerabilities have been discovered which could allow for remote code execution. An attacker could then install programs; view, change, or delete data; or create new accounts.
In recent years, Clop (Cl0p) has emerged as a prominent and successful ransomware group that targets commonly used file transfer software. They used social engineering, phishing, and more in one extensive campaign before going quiet for several months.
The NJCCIC recently observed a text message phishing campaign in which threat actors attempted to steal users’ banking credentials and payment card details. Information about this campaign can be found in the video embedded in the NJCCIC post. Click to learn more.
Throughout 2023, researchers discovered 10 new trojans targeting Android devices and 19 banking malware families that had persisted since 2022. These malware families targeted banking apps across 61 countries, primarily targeting traditional banking apps.
The National Security Agency and FBI recently issued a cybersecurity advisory regarding APT43, a North Korean linked hacking group, that was exploiting weak email Domain-based Message Authentication Reporting and Conformance policies to mask spearphishing attacks.
