Cybersecurity Breaches and Attacks

MSSP Alert’s news coverage and analysis of cybersecurity breaches and attacks — including hackers, malware, viruses, worms, ransomware, distributed denial of service attacks (DDoS), phishing, stolen passwords, social engineering and more.

LastPass Hires Mandiant To Investigate Security Incident; Customer Passwords Safe

Credit: Getty Images

LastPass hires Mandiant to investigate security incident; customer passwords “remain safely encrypted,” LastPass CEO Karim Toubba said.

Black Basta Crew Using Qakbot in Widespread Ransomware Strikes

Credit: Getty Images

Cybereason reports that its managed services team observed multiple infections of Black Basta using QakBot beginning more than a year ago.

Cyber Hackers-for-Hire Hitting Mobile Devices with Fake VPN Apps

Credit: Getty Images

MSSPs on notice as cyber mercenary group Bahamut targets Android users with fake VPN apps to steal confidential data, ESET reports.

Ransomware Warning! Expect Hackers to Hit Harder During Holiday Season

Credit: Getty Images

Ransomware attacks during weekends and holidays hit organizations when they are most vulnerable, causing greater damage, Cybereason reports.

“Freebie Bots” Plague Online Holiday Shoppers, Reports Bot Defender Kasada

Credit: Getty Images

Freebie bots are used to automatically scan retail websites for mispriced goods and services and purchase them before the error is fixed.

Cyber Attacker Earth Preta in Spear Phishing Campaign Via Google Drive Links

Trend Micro recommends companies implement ongoing phishing awareness training for partners and employees.

Ransomware Attacks in Transportation and Shipping Industries Double in Q3 2022

Trellix reveals evidence of malicious activity linked to ransomware and nation-state backed advanced persistent threat actors.

Australia Critical Infrastructure Hit by REvil Affecting Millions of Records; Authorities Vow Retaliation

Credit: Getty Images

Australian Cybersecurity Minister Clare O’Neil vows to “hack the hackers” rather than just ramping up defenses.

Chinese Connected Cyber Crew Unleashes Disinformation Campaign Ahead of U.S. Elections

Credit: Pixabay

Mandiant is confident hackers are attempting to create conflict between the U.S. and allies for the benefit of China’s state-backed operatives.

FBI, CISA, HHS Warn Healthcare Facilities of Targeted Cyberattacks

Daixin cybercrime gang execute ransomware attacks at multiple healthcare organizations; learn how to protect your sensitive data.