More Russian Cyber Operations against Ukraine
January 5 2022Both Russia and Ukraine are preparing for military operations in cyberspace.
Read moreMore Russian SVR Supply-Chain Attacks
October 28 2021Microsoft is reporting that the same attacker that was behind the SolarWinds breach — the Russian SVR, which Microsoft is calling Nobelium — is continuing with similar supply-chain...
Read moreREvil is Off-Line
July 16 2021
This is an interesting development:
Just days after President Biden demanded that President Vladimir V. Putin of Russia shut down ransomware groups attacking American targets, the most aggressive of...
Read more
Details of the REvil Ransomware Attack
July 8 2021
ArsTechnica has a good story on the REvil ransomware attack of last weekend, with technical details:
This weekend’s attack was carried out with almost surgical precision. According to Cybereason,...
Read more
More Russian Hacking
July 2 2021
Two reports this week. The first is from Microsoft, which wrote:
As part of our investigation into this ongoing activity, we also detected information-stealing malware on a machine belonging...
Read more
The DarkSide Ransomware Gang
June 2 2021
The New York Times has a long story on the DarkSide ransomware gang.
A glimpse into DarkSide’s secret communications in the months leading up to the Colonial Pipeline attack...
Read more
The Misaligned Incentives for Cloud Security
May 28 2021
Russia’s Sunburst cyberespionage campaign, discovered late last year, impacted more than 100 large companies and US federal agencies, including the Treasury, Energy, Justice, and Homeland Security departments. A...
Read moreRansomware Shuts Down US Pipeline
May 10 2021This is a major story: a probably Russian cybercrime group called DarkSide shut down the Colonial Pipeline in a ransomware attack. The pipeline supplies much of the...
Read more
Recent Comments