Minacce e avversari · DDoS

MuddyWater Compromette Banca e Aeroporto USA con Backdoor

MuddyWater ha stabilito accessi persistenti in reti statunitensi e israeliane. Broadcom (Symantec e Carbon Black) ha identificato Dindoor, un backdoor Deno, e Fakeset, un backdoor Python. Target confermati: una banca USA, un aeroporto USA, una ONG canadese e la filiale israeliana di un fornitore difesa; rilevata un’esfiltrazione via Rclone verso Wasabi.

18 fonti · 24 mar

Cronologia

24 mar Segnalato da The Record from Recorded Future
24 mar Segnalato da Cybersecurity Dive
19 mar Segnalato da CyberScoop
18 mar Segnalato da Tenable
16 mar Segnalato da Unit 42
13 mar Segnalato da ESET Research
12 mar Segnalato da Dark Reading
11 mar Segnalato da Rapid7
10 mar Segnalato da Check Point Research
6 mar Segnalato da The Hacker News
5 mar Segnalato da Schneier on Security
3 mar Segnalato da TechCrunch Security

Fonti

24 mar The Record from Recorded Future
Iran-linked ransomware gang targeted US healthcare org amid military conflict
The incident responders noted that there was no evidence that data was exfiltrated during the intrusion — an unusual development considering U.S. intelligence agencies previously said Pay2Key attacks were largely conducted for information theft.
originale
24 mar Ars Technica Security
Self-propagating malware poisons open source software and wipes Iran-based machines
Development houses: It's time to check your networks for infections.
originale
24 mar SecurityWeek
Stryker Says Malicious File Found During Probe Into Iran-Linked Attack
The FBI has published an alert describing the malware used by Iranian government hackers.
originale

Part of the PlainSec briefing for 2026-03-07

Every edition of this story: MuddyWater Compromette Banca e Aeroporto USA con Backdoor

MuddyWater Compromette Banca e Aeroporto USA con Backdoor

Cronologia

Fonti

Altro da oggi