Go to listing page

Daily Cybersecurity Roundup, November 18, 2022

Reflecting on the recent past, federal agencies had released a warning about increased Hive ransomware activities. In a new such alert, the CISA revealed that the ransomware group collected ransom payments from over a thousand companies. Mustang Panda is back in the headlines as it has been targeting multiple sectors across the world. In another update on ransomware threats, researchers revealed that the transportation industry was badly affected by them in the past quarter. Read along to know more.

01

An alert published by the CISA, the FBI, and the HHS states that the Hive ransomware group extorted over $100 million in ransom payments from 1,300 organizations, from June 2021 to November 2022.

02

A large-scale spear-phishing campaign by Mustang Panda APT was found targeting academic, government, research, and foundation sectors worldwide.

03

Vanuatu, a South Pacific ocean archipelago, suffered a ransomware attack that stranded the nation for 11 days. The attack took down the intranet and online databases of schools and hospitals.

04

A previously unknown ransomware, ARCrypter, was found expanding its foothold from Latin America to China, Canada, the U.S., Germany, and France.

05

New report by Trellix revealed that ransomware attacks surged 100% quarter-over-quarter in the U.S. transportation and shipping sector, in Q3 2022.

06

Akamai found an advanced phishing kit targeting North Americans since mid-September. The kit features a token-based system, ensuring that every victim is led to a unique phishing URL.

07

Phishing emails deploying QBot have resorted to abusing a DLL hijacking vulnerability in Windows 10 Control Panel, as a means to evade detection by security solutions.

08

Kaspersky detected 438,035 malicious installation packages, in Q3 2022, of which 35,060 packages were associated with mobile banking trojans and 2,310 were mobile ransomware trojans.

09

The LodaRAT malware reemerged with new strains that are being delivered alongside RedLine Stealer and Neshta. It is also being deployed by Venom RAT.

10

The Australian government’s cybersecurity minister announced plans to launch the Joint Standing Operation task force, merging domestic police and foreign intelligence resources, to disrupt international cybercrime.

Get the Daily Cybersecurity Roundup delivered to your email!