INTRODUCTION Cisco Talos observed North Korean state-sponsored APT Lazarus Group conducting malicious activity between February and July 2022. Lazarus has been previously attributed to the North Korean government by the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The entry vectors involve the successful exploitation of vulnerabilities in VMWare products to establish initial footholds into enterprise networks, followed by the deployment of the group’s custom malware implants, VSingle and YamaBot. In...
Read More
What is Vice Society? Vice Society is a little-known double extortion group that joined the cybercrime ecosystem a year ago. Since then, it showed a steady activity, encrypting and exfiltrating its victim’s data and threatening their victims to leak their information to pressure them into paying a ransom. Unlike other RaaS (Ransomware-as-a-Service) double extortion groups, Vice Society focuses on getting into the victim system to deploy ransomware binaries...
Read More
BGD e-GOV CIRT গত বছরের মত এবারও সকল আর্থিক প্রতিষ্ঠানে কর্মরত সাইবার পেশাজীবিদের অংশগ্রহণের মাধ্যমে তাদের সাইবার নিরাপত্তায় ইন্সিডেন্ট হ্যান্ডলিং বিষয়ে দক্ষতা বৃদ্ধি ও সাইবার নিরাপত্তার ধারণা দেওয়ার জন্য আগামী ২২ অক্টোবর ২০২২ তারিখে Financial Institution Cyber Drill 2022 এর আয়োজন করতে যাচ্ছে। Registration এর জন্য প্রতিটি দলের জন্য ১০,০০০ (দশ হাজার) টাকা নিবন্ধন ফি ধার্য্য করা হয়েছে যা CIRT এর e-shop এর মাধ্যমে পেমেন্ট...
Read More
Cybercrime Activities At A Glance Introduction The Aviation industry is a critical, strategic, and economically important sector for any nation. The pandemic-struck industry has started showing signs of gradual recovery after two years of volatility, however, attaining the pre-COVID global travel figures seems still farfetched until mid-2023. Amidst epidemic chaos, the Aviation industry steered itself towards embracing technology to reduce human dependence and make a...
Read More
Cyble Research and Intelligence Labs (CRIL) has been tracking the activities of various Android Banking Trojans such as Hydra, Ermac, and Amextroll, amongst several others. During a routine threat-hunting exercise, we came across a Twitter post where a researcher mentioned a malware sample. After an in-depth analysis, the malware was identified as a new Android Banking Trojan variant targeting over 40 applications from Peru. The Threat Actor (TA) uses the...
Read More
