Difesa e Sicurezza (difesaesicurezza.com)

In Evidence

Cybercrime, Nobelium exploits a new custom malware: Ceeloader

Mandiant cybersecurity experts: The APT (aka UNC2452) also shows two distinct clusters of activity, UNC3004 and UNC2652.

Iraq, the lioness Bayan Osman chases the Islamic State from Kidir Jijia

The woman and her family defended the village from an attack by 30 pro-ISIS militiamen. She has lost three of her six sons, but she does not give up and is ready to defeat them again.

Cybercime, NginRAT targets the E-Commerce Nginx web server

Sansec cybersecurity experts: The new parasitic malware, spread by CronRAT, hijacks a host Nginx application to masquerade its presence.

Syria, the Islamic State is one step ahead of the SAA west of Deir Ezzor

Double attack by pro-ISIS jihadists against soldiers and workers of an oil field. Damascus launches yet another roundup, but to no avail.

Cybercrime, Emotet is spread via fake Adobe Windows App Installer

Cryptolaemus cybersecurity experts: The malware distribution process is the same used to distribute BazarLoader.

Syria, pro-Iran militias in Deir Ezzor are now also recruiting young women

They are required for non-military activities, primarily in hospitals. Tehran aims to expand its influence in the country thanks to 3 pillars: recruitment, new bases and economic growth.

Restricted Area

“Restricted Area” is born: a new exclusive channel in Italian and English on the latest cyber security researcher JAMESWT hunting, documented with pictures. For the moment it’s open, but soon it will only be visible by subscription.

Visit the Restricted Area

Defence

Iraq, the lioness Bayan Osman chases the Islamic State from Kidir Jijia

7 December 2021

The woman and her family defended the village from an attack by 30 pro-ISIS militiamen. She has lost three of her six sons, but she does not give up and is ready to defeat them again.

Syria, the Islamic State is one step ahead of the SAA west of Deir Ezzor

6 December 2021

Double attack by pro-ISIS jihadists against soldiers and workers of an oil field. Damascus launches yet another roundup, but to no avail.

Syria, pro-Iran militias in Deir Ezzor are now also recruiting young women

3 December 2021

They are required for non-military activities, primarily in hospitals. Tehran aims to expand its influence in the country thanks to 3 pillars: recruitment, new bases and economic growth.

Syria, someone is eliminating the Sultan Murad Division leadership

2 December 2021

The targets are the commanders of the pro-Turkey faction in Aleppo. The murder campaign is part of the war between militias.

Syria, pro-Turkey militias try to finance themselves with kidnappings of civilians

1 December 2021

They are formally arrested for supporting the Kurdish administration, but the only goal is to raise cash thanks to false bails. Boom of the phenomenon in Aleppo.

Syria, Russia and the SAA fail to defeat the Islamic State in the East

30 November 2021

Moscow strikes and army combings are not enough against the former ISIS. The jihadists counterattack and kill at least 20 enemies in a month in the desert.

Syria, Russia’s concern about escalation in the North is growing

29 November 2021

New military exercises of Moscow troops in Qamishli. Objective: to maintain deterrence towards a possible TAF-militia offensive against SDF-SAA.

Syria, internal clashes between pro-Turkey militias in the North intensify

26 November 2021

Afrin and Sere Kanye are the epicenter. The military build-up in the area and the few resources increase the nervousness of the factions, even towards their allies.

Cyber

Cybercrime, Nobelium exploits a new custom malware: Ceeloader

7 December 2021

Mandiant cybersecurity experts: The APT (aka UNC2452) also shows two distinct clusters of activity, UNC3004 and UNC2652.

Cybercime, NginRAT targets the E-Commerce Nginx web server

6 December 2021

Sansec cybersecurity experts: The new parasitic malware, spread by CronRAT, hijacks a host Nginx application to masquerade its presence.

Cybercrime, Emotet is spread via fake Adobe Windows App Installer

3 December 2021

Cryptolaemus cybersecurity experts: The malware distribution process is the same used to distribute BazarLoader.

Cybercrime, APT’s last weapon is the RTF template injection

2 December 2021

Proofpoint cybersecurity experts: Groups from India, Russia and China exploit this technique. The files have low detection rate by public antivirus.

WordPress, Hashthemes Demo Importer has a critical vulnerability

1 December 2021

Wordfence cybersecurity experts: The plugin flaw enables any authorized user to entirely wipe a site clean, erasing all of the material and data posted to it.

Cyber Espionage, North Korea’s APT37 spread Chinotto to monitor opponents

30 November 2021

Kaspersky cybersecurity experts: The malware has been implemented in PowerShell, Windows and Android. The infection vector are spear phishing emails.

Cyber Espionage, new Iranian APT uses MSHTML RCE to steal Google-Instagram credentials

29 November 2021

Safe Breach Labs cybersecurity experts: The threat actor infects victims via Farsi phishing emails with a PowerShell stealer malware.

Maritime Shipping, here it comes the Maritime Cyber Baseline

26 November 2021

Launched by the IASME Consortium and supported by The Royal Institution of Naval Architects (RINA), the goal is to improve the cybersecurity and align with IMO guidelines.