Newsletter Safety Affairs Round 485 by Pierluigi Paganini – INTERNATIONAL EDITION

Disrupting Russian Cybercrime: WWH Club Administrators Arrested

International investigation leads to closure of ransomware group

Six ransomware gangs behind more than 50% of attacks in 2024

Data breach at Kootenai Health

Unconfirmed hack of 2.9 billion records at National Public Data creates media hype amid lawsuits

Suspected leader of prolific cybercriminal groups arrested and extradited

Texas company says it lost $60 million in wire transfer fraud

Russian citizen sentenced to 40 months in prison for selling stolen financial information on criminal internet marketplace Slilpp

Ransomware attack in Flint impacts city services as FBI investigates incident

Within the National Public Data Breach of “3 Billion People”

NationalPublicData.com hack exposes country’s data

Leaked environment variables enable large-scale extortion operations of cloud environments

Malware

Deciphering the Brain Cipher Ransomware

Ideal typosquat ‘solana-py’ steals your crypto wallet keys

Ransomware attackers introduce new EDR killer to their arsenal

A deep dive into a new ValleyRAT campaign targeting Chinese speakers

Tusk: Unraveling a Complex Infostealer Campaign

Hacking

Chained to Attack: OpenVPN Vulnerabilities Discovered Leading to RCE and LPE

Musk’s interview with Trump marred by technical issues

GhostWrite Attack

Massive cyberattack shakes Iran’s Central Bank, computer system down – report

Ongoing social engineering campaign renews payloads

Threat Actor Tools found that antivirus programs are bypassed, backups are deleted and systems are disabled

Want to win a bike race? Hack your rival’s wireless shifters

Zero-Click exploit concerns prompt urgent patching of Windows TCP/IP vulnerability

iVerify Discovers Vulnerability in Android Affecting Millions of Pixel Devices Worldwide

CVE-2024-38213: Copy2Pwn exploit bypasses Windows web protections

Intelligence and information warfare

We received internal Trump documents from ‘Robert’. Then the campaign confirmed it had been hacked

EastWind Campaign: New CloudSorcerer Attacks on Russian Government Organizations

Justice Department disrupts North Korean remote IT worker fraud with charges, arrest of Nashville facilitator

UAC-0198: Widespread distribution of ANONVNC (MESHAGENT) among Ukrainian government organizations

A dive into Earth Baku’s latest campaign

Pentagon to conduct large-scale experiment for Connect-Everything initiative

Iran-backed group ramps up phishing campaigns against Israel and US

NATO must recognize the potential of open-source intelligence

Disrupting a covert Iranian influence operation

Trump campaign hack-and-leak looks like a repeat of 2016. This time, media is reacting differently

Cyber ​​Security

Security issue with async signal before OpenSSH authentication

THE AUGUST 2024 SECURITY UPDATE OVERVIEW

German cyber agency wants changes to Microsoft, CrowdStrike products after technical glitch

Inside the FBI’s Dashboard for Eavesdropping on the World

Quantum Computers Will Kill Digital Security. These Algorithms Can Stop Them

An AI-powered version of Mr Musk has appeared in thousands of inauthentic ads, contributing to billions in fraud