The SolarWind cyberattack was one of the scariest examples of supply-chain attacks carried out by foreign hacking groups against Western companies. Attributed to APT29 / Cozy Bear, a Russian Foreign Intelligence Service (SVR) hacking unit, it spread through a patch and targeted some of the major IT corporations in the United States.

#cyberattacks #cyberwarfare #patching #cozyBear #sunburst

https://negativepid.blog/the-solarwinds-supply-chain-attack/
https://negativepid.blog/the-solarwinds-supply-chain-attack/

The SolarWind cyberattack was one of the scariest examples of supply-chain attacks carried out by foreign hacking groups against Western companies. Attributed to APT29 / Cozy Bear, a Russian Foreign Intelligence Service (SVR) hacking unit, it spread through a patch and targeted some of the major IT corporations in the United States.

#cyberattacks #cyberwarfare #patching #cozyBear #sunburst

https://negativepid.blog/the-solarwinds-supply-chain-attack/
https://negativepid.blog/the-solarwinds-supply-chain-attack/

The SolarWind cyberattack was one of the scariest examples of supply-chain attacks carried out by foreign hacking groups against Western companies. Attributed to APT29 / Cozy Bear, a Russian Foreign Intelligence Service (SVR) hacking unit, it spread through a patch and targeted some of the major IT corporations in the United States.

#cyberattacks #cyberwarfare #patching #cozyBear #sunburst

https://negativepid.blog/the-solarwinds-supply-chain-attack/
https://negativepid.blog/the-solarwinds-supply-chain-attack/

The SolarWind cyberattack was one of the scariest examples of supply-chain attacks carried out by foreign hacking groups against Western companies. Attributed to APT29 / Cozy Bear, a Russian Foreign Intelligence Service (SVR) hacking unit, it spread through a patch and targeted some of the major IT corporations in the United States.

#cyberattacks #cyberwarfare #patching #cozyBear #sunburst

https://negativepid.blog/the-solarwinds-supply-chain-attack/
https://negativepid.blog/the-solarwinds-supply-chain-attack/

#ThePlotToHackAmerica

#FancyBear
#CozyBear
#sponsoredbyrussia
#MalcolmNance

The SolarWind cyberattack was one of the scariest examples of supply-chain attacks carried out by foreign hacking groups against Western companies. Attributed to APT29 / Cozy Bear, a Russian Foreign Intelligence Service (SVR) hacking unit, it spread through a patch and targeted some of the major IT corporations in the United States.

#cyberattacks #cyberwarfare #patching #cozyBear #sunburst

https://negativepid.blog/the-solarwinds-supply-chain-attack/
https://negativepid.blog/the-solarwinds-supply-chain-attack/

Supply-chain attacks are a favourite in the toolbox of cyber warfare. The SolarWinds attack remains in the history books of cybersecurity for the clever use of patching as an attack vector to disrupt C2 infrastructure.

Read how it unfolded in our deep dive article! 👇

https://negativepid.blog/the-solarwinds-supply-chain-attack/

#cyberwarfare #supplychainattacks #patching #cozybear #orion #C2

Supply-chain attacks are a favourite in the toolbox of cyber warfare. The SolarWinds attack remains in the history books of cybersecurity for the clever use of patching as an attack vector to disrupt C2 infrastructure.

Read how it unfolded in our deep dive article! 👇

https://negativepid.blog/the-solarwinds-supply-chain-attack/

#cyberwarfare #supplychainattacks #patching #cozybear #orion #C2

Hackers linked to Russia used social engineering to trick a Russian affairs expert into handing over app-specific passwords.

🔗 https://hackread.com/hackers-use-social-engineering-expert-russian-operations/

#CyberSecurity #Russia #CozyBear #Phishing #Scam #Fraud

Threat actor profile: #CozyBear (APT29)

Read our comprehensive report about the Russian hacking group behind attacks such as SolarWinds, the 2016 DNC hack, and operations related to the war in Ukraine.

👉 Access the full report through our Members’ Portal: https://www.huntandhackett.com/members/register

👉 Already a member? Go straight to the report: https://www.huntandhackett.com/members/actors/apt29

Finally also available in english.

#fern #ssh #xz #backdoor #JiaTan #CozyBear #APT29 #security

https://www.youtube.com/watch?v=F7iLfuci75Y

Happy Wednesday everyone!

This resources has been popping up on my feed everywhere so I took a look at it and I see why! When he is not instructing the #SANS FOR589, Will Thomas is creating highly valuable resources like the Russian APT Tool Matrix.

Will has taken the time to correlate the tools of Russian #APTs such as #CozyBear and #Sandworm and even supplied the aliases that go along with them as well. This is a great resource if you are an organization who is APT focused to prioritize your threat hunting! Thanks a ton Will!

Enjoy and Happy Hunting!

Russian APT Tool Matrix:
https://github.com/BushidoUK/Russian-APT-Tool-Matrix/blob/main/GroupProfiles/Sandworm.md

Intel 471 #ThreatIntel #ThreatHunting #ThreatDetection #readoftheday #HappyHunting Cyborg Security, Now Part of Intel 471

The Russian APT Tool Matrix
#CozyBear #FancyBear #BerserkBear #EMBERBEAR #Sandworm #Gamaredon #Turla
https://blog.bushidotoken.net/2024/09/the-russian-apt-tool-matrix.html

unbedingt angucken!

Zum deutschen #Fernsehpreis 2024 nominiert als beste #Reportage #Doku zum Thema #Informationskrieg von #simplicissimus

Sehr strukturierte und detailreiche Aufarbeitung von dem #Bundestags-#Hacks über die "Clinton e-mail-Affäre" der #USwahl bis hin zu dem #viasat #Hack zeitgleich zum "konventionellen" Angriff auf die Ukraine und den #VulkanFiles...

#tvtipp #Hacker #GRU #merkel #trump #putin #atp28 #cozybear #fancybear #voodoobear

https://www.ardmediathek.de/video/putins-baeren/putins-baeren-die-gefaehrlichsten-hacker-der-welt/swr/Y3JpZDovL3N3ci5kZS9hZXgvbzIwMDQ0NjI

Cyberkriminelle nehmen #Spyware-Hersteller als Vorbild bei Angriff auf Browser | Security https://www.heise.de/news/Cyberkriminelle-nehmen-Spyware-Hersteller-als-Vorbild-bei-Angriff-auf-Browser-9852070.html #CyberCrime #Malware #APT29 #CozyBear

#Microsoft informiert betroffene Kunden von #MidnightBlizzard-Spionage | Security https://www.heise.de/news/Microsoft-informiert-betroffene-Kunden-von-Midnight-Blizzard-Spionage-9783168.html #CozyBear

#TeamViewer-Angriff: Die Spur führt nach #Russland 🇷🇺 | Security https://www.heise.de/news/TeamViewer-Angriff-Die-Spur-fuehrt-nach-Russland-9782630.html #Russia 🇷🇺 #APT29 #CozyBear #MidnightBlizzard #CyberCrime

Russian hackers read the emails you sent us, Microsoft warns more customers - More of Microsoft's clients are being warned that emails they exchanged with the company ... https://www.bitdefender.com/blog/hotforsecurity/russian-hackers-read-your-emails-to-us-microsoft-warns-more-customers/ #securitythreats #databreach #guestblog #microsoft #dataloss #cozybear #nobelium

Fernwartungszugänge sind regelmäßig Thema, wenn es um Cyber-Sicherheit von Unternehmen geht. Sehr häufig nutzen Unternehmen den TeamViewer. Dort hat es wohl einen Angriff der russischen Hackergruppe Cozy Bear bzw. APT29 gegeben. Wie weitreichend der Angriff war, wird gerade untersucht. #teamviewer #hackerangriff #cybercrime #fernwartung #cozybear #apt29 #russia #russland

https://www.welt.de/newsticker/dpa_nt/infoline_nt/netzwelt/article252248950/Cyberangriff-auf-Fernwartungssoftware-Anbieter-Teamviewer.html

📬 Sicherheitsvorfall bei TeamViewer: Steckt der russische Geheimdienst dahinter?
#ITSicherheit #APT29 #CozyBear #HealthISAC #NCCGroup #Sicherheitsvorfall #TeamViewer https://sc.tarnkappe.info/ce70e5