Cybercrime, some APTs can fully access ICS / SCADA devices
DoE, CISA, NSA and FBI cybersecurity experts from: They have developed custom tools that attack Schneider Electric and OMRON Sysmac NEX PLCs, and OPC-UA.
Cybercrime, a fake email from the Philippines conveys Formbook
The r00 attachment contains an exe file: the malware itself.
Ukraine: Finland wants drones to protect borders from Russia
A tender was launched for the acquisition of between 1,000 and 2,000 UAS for ISR operations. The machines will operate from the southern coast to northern Lapland.
Ukraine, the sinking of the Moskva is a very hard blow for Russia
Moscow has no units to replace the cruiser Slava, Marshal Ustinov and Varyag cannot access the Black Sea. The invasion of Odessa could be skipped.
Ukraine, new Sandworm attack against the electric grid
Russia’s GRU Unit 74455 exploited INDUSTROYER2 custom malware, CADDYWIPER, Orcshred, Soloshred and Awfulshred to cut power in a region.
Ukraine: Sweden and Finland may soon join NATO
There is talk of June 2022 (Madrid summit). To counter Russia, a new “Gorizia Line” and an InfoWar center similar to the CCDCOE in Tallinn are being looked at.
Cybercrime, Lokibot “Re TOP URGENT Shipping Documents” campaign
Doc attachment doc contacts a url from which it downloads the malware. The campaign is not geofenced and there are no blacklists.
Cybercrime, AgentTesla is hiding in a fake Swift transfer
R11 email attachment contains an exe file: the malware itself. Stolen data is exfiltrated via Telegram.
Cybercrime, FFDroider Stealer is a new malware targeting social network platform users
Zscaler cybersecurity experts: Designed to steal credentials and cookies, it disguises itself as Telegram. The infection vectors are cracked version of installers and freeware.
Cybercrime, Quakbot goes through a fake Covid-19 themed email
The link in the message downloads a password protected zip file (provided in the text) with an MSI executable that installs the malware.