Voici la sélection des cyberattaques majeures découvertes la semaine passée.
Vous retrouvez ci-dessous les liens directs vers les articles les plus intéressants. Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !
Les actus sélectionnées cette semaine
Thousands of servers hacked in ongoing attack targeting Ray AI framework
Researchers say it’s the first known in-the-wild attack targeting AI workloads.
Google blockiert 5,5 Milliarden Werbeanzeigen im Jahr
Für Google ist Künstliche Intelligenz Fluch und Segen zugleich. KI erleichtert die Erstellung von betrügerischen Anzeigen. Sie hilft aber auch, die unerwünschten Inhalte zu erkennen und zu blockieren.
Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite
Indian government & energy sectors under attack. Hackers used phishing emails, weaponized ‘HackBrowserData’ malware to steal sensitive data.
Finland confirms APT31 hackers behind 2021 parliament breach
The Finnish Police confirmed on Tuesday that the APT31 hacking group linked to the Chinese Ministry of State Security (MSS) was behind a breach of the country’s parliament disclosed in March 2021.
PyPI Suspends New Projects and Users Due to Malicious Packages
The Python Package Index (PyPI), the official repository for third-party Python software, has suspended new user registration and project creation.
Africa Tackles Online Disinformation Campaigns During Major Election Year
Cyber-disinformation campaigns targeting Africa have taken off in 2024, as 18 nations prepare to hold elections, and cybersecurity efforts are key to taming the threat.
Saudi Arabia, UAE Top List of APT-Targeted Nations in the Middle East
Government, manufacturing, and the energy industry are the top targets of advanced, persistent threat actors, with phishing attacks and remote exploits the most common vectors.
CySecurity News – Latest Information Security and Hacking Incidents: Unmasking Cyber Shadows: New Zealand’s Battle Against State-Backed Hackers
New Zealand’s parliament faced cyberattacks orchestrated by Chinese state actors. These attacks aimed to infiltrate sensitive government systems.
Medusa Ransomware group demands $700k from victims – Cybersecurity Insiders
Tarrant Appraisal District (TAD), a governmental entity in Texas, has made headlines due to a sophisticated cyber attack suspected to be orchestrated by
New Zealand accuses China for hacking the Parliament – Cybersecurity Insiders
After the United Kingdom’s purported accusation against China of launching a cyber attack on its Electoral Commission in 2021, allegedly aimed at stealing
UK accuses China of cyberattacks on British democracy
Britain rolls out sanctions and summons Chinese ambassador as it points finger at ‘Chinese state-affiliated actors.’
Airlines report GPS signal jamming: Russia gets the blame
GPS interference is hitting aircraft navigation systems in the Baltics as well as in other conflict regions.
US and UK accuse China of cyber operations targeting domestic politics
Officials in Washington and London say hackers backed by the Chinese state sought to silence dissidents and surveil politicians.
Over 100 US and EU orgs targeted in StrelaStealer malware attacks
A new large-scale StrelaStealer malware campaign has impacted over a hundred organizations across the United States and Europe, attempting to steal email account credentials.
New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts
Cybercriminals have been increasingly using a new phishing-as-a-service (PhaaS) platform named ‘Tycoon 2FA’ to target Microsoft 365 and Gmail accounts and bypass two-factor authentication (2FA) protection.
Hackers poison source code from largest Discord bot platform
The Top.gg Discord bot community with over 170,000 members has been impacted by a supply-chain attack aiming to infect developers with malware that steals sensitive information.
APT29 Uses WINELOADER to Target German Political Parties | Mandiant
In late February, APT29 used a new backdoor variant publicly tracked as WINELOADER to target German political parties with a CDU-themed lure. This is the first time we have seen this APT29 cluster target political parties, indicating a possible area of emerging operational focus beyond the typical targeting of diplomatic missions.
La FFF frappée par une cyberattaque – Le Monde Informatique
Intrusion, Hacking et Pare-feu : Des données personnelles incluant des coordonnées et des numéros de licenciés de la Fédération Française de Football ont été piratées. Plusieurs…