Minacce e avversari · DDoS

Operazioni Cyber Legate all'Iran Aumentano: Wiper e Ransomware

Gruppi legati all'Iran e attori pro‑Iran hanno intensificato operazioni distruttive e di estorsione informatica. TeamPCP ha lanciato un self‑propagating worm e un wiper che cancella macchine con timezone o locale Iran, e ha compromesso Trivy per distribuire backdoor credential‑stealing.

18 fonti · 24 mar

Cronologia

• 24 mar Segnalato da The Record from Recorded Future
• 23 mar Segnalato da BleepingComputer
• 19 mar Segnalato da CyberScoop
• 17 mar Segnalato da Tenable
• 16 mar Segnalato da Unit 42
• 12 mar Segnalato da Dark Reading
• 11 mar Segnalato da Rapid7
• 10 mar Segnalato da Check Point Research
• 6 mar Segnalato da The Hacker News
• 5 mar Segnalato da Schneier on Security
• 3 mar Segnalato da TechCrunch Security

Fonti

• 24 mar The Record from Recorded Future

  Iran-linked ransomware gang targeted US healthcare org amid military conflict

  The incident responders noted that there was no evidence that data was exfiltrated during the intrusion — an unusual development considering U.S. intelligence agencies previously said Pay2Key attacks were largely conducted for information theft.

  originale

• 24 mar Ars Technica Security

  Self-propagating malware poisons open source software and wipes Iran-based machines

  Development houses: It's time to check your networks for infections.

  originale

• 24 mar SecurityWeek

  Stryker Says Malicious File Found During Probe Into Iran-Linked Attack

  The FBI has published an alert describing the malware used by Iranian government hackers.

  originale

Part of the PlainSec briefing for 2026-03-24

Every edition of this story: Operazioni Cyber Legate all'Iran Aumentano: Wiper e Ransomware

Altro da oggi

• Phishing Telefonico Spinge 11% delle Intrusioni 2025