Adam Sewall’s Post

https://lnkd.in/gbUT-sig NATO Member Wants India’s Help To Fight China As Estonia Gets Battered By Chinese Cyber, DoS Attacks In the shadowy realm of cyberspace, an unlikely alliance has formed to combat the digital onslaught emanating from the East. NATO’s tiny Baltic member, Estonia, with a population of just over a million, has extended a virtual hand of friendship to the I.T. powerhouse of India, seeking closer cybersecurity ties to counter the relentless Chinese hacking menace. India and Estonia have...

Russian APT28 Hackers Targeting High-Value Orgs with NTLM Relay Attacks: Russian state-sponsored actors have staged NT LAN Manager (NTLM) v2 hash relay attacks through various methods from April 2022 to November 2023, targeting high-value targets worldwide. The attacks, attributed to an "aggressive" hacking crew called APT28, have set their eyes on organizations dealing with foreign affairs, energy, defense, and transportation, as well as those involved with https://lnkd.in/gidqjt3N

Yesterday Bloomberg News published an article about cyberattacks targeting Israel are on the rise after Hamas attack that launched a series of deadly attacks on the country over the weekend. Hacking groups, including some tied to Russia, are attacking the Israeli government and media websites. Killnet, a group that purports to be made of up patriotic Russain volunteer hackers, announced on Sunday that it would target Israeli government systems. Mattias Wåhlén - Threat Intelligence expert at Truesec - was quoted in the article: “It is clear that other Russian hacktivists are also choosing sides and actively support Hamas in their war against Israel. Their actions look more like opportunistic strikes. The conflict creates headlines which attracts groups like Killnet that try to monetize DDoS attacks. It still sends the message that Russia is on the side of Hamas and against Israel.” Read the article on the link below. #CyberSecurity #ThreatIntelligence #ProtectSociety

Russia-aligned hackers target European and Iranian embassies in new espionage campaign ... A Russia-linked hacking group is exploiting a known bug in a popular webmail server to spy on government and military agencies in Europe, as well as Iranian embassies in Russia, according to a new report. In a recent espionage campaign, the hackers tracked as TAG-70 used a cross-site scripting (XSS) vulnerability in the Roundcube web-based email server.  The exploitation of a known bug in the popular webmail server, Roundcube, by a Russia-linked hacking group TAG-70 is serving as a sidebar for espionage campaign aimed at spying on European government and military agencies. #activeSENTINEL™ , #nebulositycloud , #ransomware , #counteroffense , #unGUARDED™ , #LOTL

It is important to understand, that this hybrid conflict is not only hybrid in its dimensions (land, sea, air, cyber) but also hybrid / multi-modal in its participants. Regular and irregular units are involved, wether they are coordinated or not. Another aspect to keep in mind: The irregular and regular cyber activities, like this (harmless?) DDoS, are not limited to Ukraine / Russia. Any entity, that the adversaries deem worthy, may become a target. #ShieldsUp

Russia-aligned hackers target European and Iranian embassies in new espionage campaign ... A Russia-linked hacking group is exploiting a known bug in a popular webmail server to spy on government and military agencies in Europe, as well as Iranian embassies in Russia, according to a new report. In a recent espionage campaign, the hackers tracked as TAG-70 used a cross-site scripting (XSS) vulnerability in the Roundcube web-based email server.  The exploitation of a known bug in the popular webmail server, Roundcube, by a Russia-linked hacking group TAG-70 is serving as a sidebar for espionage campaign aimed at spying on European government and military agencies. #activeSENTINEL™ , #nebulositycloud , #ransomware , #counteroffense , #unGUARDED™ , #LOTL

**Breaking News:** 🇺🇸 The U.S. White House underscores virtual asset hacking as a critical element in thwarting North Korea's ongoing missile provocations. Anne Neuberger, deputy adviser for cyber and new technologies at the White House National Security Council, highlights the importance of addressing the theft of virtual assets, citing North Korea's use of hacking to evade international sanctions and accelerate missile launches. Weak security and the relative lack of regulation in the virtual asset field make it susceptible to North Korean hackers. 🚀💻 #NorthKoreaMissileProvocations

Critical infrastructures and their security are topics of action globally.

Russian Affiliated Hacking Groups including Anonymous Sudan Hackers together took down with #DDoS the top Internet provider in #Poland (P4NET) trying to affect logistics of NATO , they claim that "logistics of supplies of Western equipment have also been disrupted because of this." The first attacks started Last Night and based on information I gathered they will continue it yet again. The groups participated in attacks are (ex-Killnet, NoName, DDosiaProject, Anonymous Sudan, IRAN APT , USERSEC) This is very large Layer4 DDoS Attacks.