Category: Cybercrime

HomeCybercrime

Log4j vulnerability: what should boards be asking?

Background The Log4Shell critical vulnerability in the widely used logging tool Log4j has caused concern beyond the cyber security community. This is because Log4j - rather than being a single piece of software - is a software component that’s used by millions of computers worldwide running online services....

Continue Reading  

Apache Log4j Vulnerability Guidance

Background Apache Log4j2 is a ubiquitous library used by millions for Java applications; the library is part of the Apache Software Foundation’s Apache Logging Services project. The vulnerability CVE-2021-44228, disclosed on December 9, 2021, allows for remote code execution against...

Continue Reading  

Alert (AA21-291A) BlackMatter Ransomware : The Dark Side Returns

Background BlackMatter is a new ransomware threat discovered at the end of July 2021. BlackMatter is ransomware-as-a-service (Raas) tool that allows  the ransomware's developers to profit from cybercriminal affiliates (i.e., BlackMatter actors) who deploy it against victims. This malware started...

Continue Reading  

FoggyWeb: SolarWinds Hackers Access Microsoft AD Servers

Background The Microsoft Threat Intelligence Center (MSTIC) has released information on the uncovering of a widespread malicious email campaign undertaken by the activity group that Microsoft tracks as NOBELIUM. Nobelium, which operates from Russia, is the name given to the threat actor behind...

Continue Reading  

Kaseya Ransomware Attack- 2

In the previous installation, we delved into the history of the primary victim, Kaseya and the bad actors, REvil. From previous exploits to the final and most devastating one, REvil is and will continue to be a force to reckon...

Continue Reading  

Kaseya Ransomware Attack – 1

In 2019, Cybernetic Global Intelligence had warned about REvil. Refer to our previous blog on GandCrab ransomware: Is it back under a new REvil guise? The fourth of July celebrations in America this year were slightly different for around 1500 organizations...

Continue Reading  

Infamous Ransom Hacker Gang REvil/Sodin Claim Responsibility for Cyber Attack Against UnitingCare.

Hackers declaring culpability for a cyber-attack on care provider UnitingCare Queensland have been confirmed as one of the largest and far-reaching cyber ransom groups in the world. Hospitals in Australia and New Zealand have fallen victim to a huge cyber...

Continue Reading  

Australian organizations are continually failing to fend off ‘inevitable’ and costly cyber-attacks!

Australian organizations are continually failing to fend off ‘inevitable’ and costly cyber-attacks! Watchdog rips into NZX for repeated tech fails & OAIC finds 'multiple' Australian companies downplaying data breaches. A recent study has reported that Australian businesses and organizations are...

Continue Reading  

NZ Central Bank’s Data System Got Hacked

New Zealand's central bank reports that an anonymous hacker who has potentially accessed commercially and personally confidential information has compromised one of its data systems. According to a statement, from a Wellington-based bank, a third-party file-sharing service used by the...

Continue Reading  

The Wakeup Call for all organizations to Intensify Cybersecurity

SolarWinds & FireEye Data Breach: The Wakeup Call for all organizations to Intensify Cybersecurity The security industry is resonating with news of the FireEye breach and the announcement of the U.S. The Treasury Department, DHS, and possibly many other government...

Continue Reading