threatintel

ICS & OT Cybersecurity Attack Trends

July 6, 2022

We explore Trend Micro’s latest research into industrial cybersecurity, including the impact of attacks, maturity of security programs, and recommendations...

Brand-New HavanaCrypt Ransomware Poses as Google Software Update App, Uses Microsoft Hosting Service IP Address as C&C Server

July 6, 2022

We recently found a new ransomware family, which we have dubbed as HavanaCrypt, that disguises itself as a legitimate Google...

Data Distribution Service: An Overview Part 1

July 6, 2022

In this three-part blog series, we’ll look into Data Distribution Service, why it is critical, and how you can mitigate...

CISA

CISA: North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector

July 6, 2022

North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector CISA, the Federal Bureau...

CISA

threatintel

ICS & OT Cybersecurity Attack Trends

Brand-New HavanaCrypt Ransomware Poses as Google Software Update App, Uses Microsoft Hosting Service IP Address as C&C Server

Data Distribution Service: An Overview Part 1

CISA: North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector

CISA: OpenSSL Releases Security Update

Cyberattacks against law enforcement are on the rise

Less popular, but very effective, Red-Teaming Tool BRc4 used in attacks in the wild

NCSC urges organisations to prepare for the long haul on Russia-Ukraine

BlackCat/ALPHV Ransomware Victim: Sinclair Wilson

Cobalt Stike Beacon Detected – 167[.]71[.]108[.]30:80

Cobalt Stike Beacon Detected – 101[.]35[.]111[.]90:80

Cobalt Stike Beacon Detected – 150[.]158[.]173[.]39:80

TikTok is “unacceptable security risk” and should be removed from app stores, says FCC

Cobalt Stike Beacon Detected – 84[.]32[.]190[.]1:443

Cobalt Stike Beacon Detected – 120[.]26[.]165[.]99:8080

Cobalt Stike Beacon Detected – 110[.]81[.]153[.]31:8443

Cobalt Stike Beacon Detected – 223[.]165[.]64[.]234:80

New Hive ransomware variant is written in Rust and use improved encryption method

Update now! Chrome patches ANOTHER zero-day vulnerability

Insider Threat: Employees indicted for stealing $88 million of license keys

Malicious NPM packages used to grab data from apps, websites

LockBit 3.0 Ransomware Victim: lesbureauxdelepargne[.]com

BlackCat/ALPHV Ransomware Victim: adlerdisplay-com – Adler Display

Cobalt Stike Beacon Detected – 103[.]133[.]179[.]55:80

[RANSOMHUB] – Ransomware Victim: polaraire[.]com

[KILLSEC] – Ransomware Victim: LiquiTech

[MONTI] – Ransomware Victim: Oxford Auto Insurance

[KILLSEC] – Ransomware Victim: Camim

[SAFEPAY] – Ransomware Victim: smartdimensions

You may have missed