Go to listing page

Daily Cybersecurity Roundup, April 18, 2024

In a digital gold rush, alleged Chinese threat actors have been found mining for crypto on compromised Kubernetes clusters. FIN7 has reared its head with a new backdoor in its arsenal. The threat group targeted a large U.S. car maker. The cyber landscape witnessed the emergence of a new trend - junk gun ransomware. Read on to know more about it. 

01

Possible Chinese attackers are exploiting vulnerabilities in the OpenMetadata platform running on Kubernetes clusters to download cryptomining software.

02

The financially motivated threat actor FIN7 targeted a large U.S. car maker using spear-phishing emails to infect systems with the Anunak backdoor.

03

In March, Zscaler ThreatLabz discovered a malvertising campaign using Google Ads to distribute a new backdoor named MadMxShell, which targeted IT professionals.

04

The Sandworm hacking group has been using hacktivist personas, such as XakNet Team, CyberArmyofRussia_Reborn, and Solntsepek, to hide its attacks and operations, particularly against water utilities in the U.S., Poland, and France - found Mandiant.

05

Law enforcement from 19 countries conducted a year-long operation to disrupt the LabHost phishing platform, resulting in the arrest of 37 suspects and the shutdown of the platform.

06

Sophos spotted a new trend, dubbed junk gun ransomware - cheap ransomware for one-time use for wannabe criminals. Researchers found 19 such varieties.

07

According to the Food and Ag-ISAC, the U.S. food and agriculture sector faced at least 167 ransomware attacks in 2023, making it the seventh-most targeted sector.

08

The House of Representatives recently passed a bill that aims to prevent spy agencies and law enforcement from purchasing Americans' personal data from third-party data brokers.

09

Asset intelligence vendor Armis announced the acquisition of prioritization and remediation vendor Silk Security for $150 million.

10

Israeli cybersecurity startup Miggo Security raised $7.5 million in seed funding from YL Ventures Ltd., with contributions from Cyber Club London and several private investors.

Get the Daily Cybersecurity Roundup delivered to your email!