安全· · 2 分钟Phishing Rampant: IRS and Tycoon2FA Target Victims.
Today's cybersecurity news is packed with urgent alerts and significant breaches. From phishing scams to supply chain attacks, it's clear that cyber threats are evolving rapidly. Keeping up with these developments is crucial for all organizations.
Phishing Rampant: IRS and Tycoon2FA Target Victims
Microsoft has flagged a phishing campaign hitting 29,000 IRS users, deploying RMM malware. This isn't just an isolated incident; it's part of a larger trend where attackers exploit tax season vulnerabilities.
On the other hand, Tycoon2FA, a phishing-as-a-service platform, continues to operate post-takedown. Despite law enforcement efforts, it’s back to sending out millions of malicious emails, highlighting the resilience of such platforms against crackdowns.
Ransomware and Supply Chain Attacks on the Rise
Ransomware continues to plague various sectors, with Trio-Tech reporting an attack that encrypted files in one of its subsidiaries. The company is actively investigating and implementing response protocols.
Meanwhile, the Trivy supply chain attack has expanded its reach. Threat actors have pushed compromised Docker images into public repositories, risking widespread impact across developer environments.
Critical Vulnerabilities Demand Immediate Attention
CISA has ordered federal agencies to patch a critical Cisco flaw with a CVSS score of 10. This vulnerability allows remote attackers to execute arbitrary code, posing an immediate threat to national security.
In another urgent update, Oracle issued a patch for a critical identity manager vulnerability that could lead to remote code execution. Organizations need to act fast to safeguard their systems.
Emerging Threats: North Korean Hackers and Wiper Attacks
North Korean hackers are now exploiting VS Code auto-run tasks to deploy malware. This showcases a shift in tactics where traditional development tools are being weaponized.
Additionally, a new wiper malware targeting Iran, CanisterWorm, is spreading via poorly secured cloud services. This attack underlines the need for stronger security in cloud environments.
Microsoft Warns IRS Phishing Hits 29,000 Users
Microsoft has issued a warning about a major phishing campaign impacting 29,000 IRS users. The attackers are deploying RMM malware, exploiting the tax season rush.
Trivy Supply Chain Attack Spreads to Docker, GitHub Repos
The Trivy supply chain attack has compromised Docker images and GitHub repositories, raising alarms about security in software development environments.
- CISA Orders feds to patch DarkSword iOS flaws exploited attacksCISA has instructed federal agencies to patch critical iOS vulnerabilities exploited by DarkSword. — BleepingComputer
- FBI warns of Handala hackers using Telegram in malware attacksThe FBI warns that Handala hackers are using Telegram for command-and-control in malware attacks. — BleepingComputer
- Operation Alice Takes Down 370,000+ Dark Web SitesA major law enforcement operation has dismantled over 373,000 dark web sites involved in cybercrime. — Infosecurity Magazine
- Crunchyroll probes breach after hacker claims to steal 6.8M users' dataCrunchyroll is investigating a breach after hackers claimed to have stolen data of 6.8 million users. — BleepingComputer
- Chip Services Firm Trio-Tech Says Subsidiary Hit by RansomwareTrio-Tech reports a ransomware attack affecting a subsidiary, leading to file encryption. — SecurityWeek
本期内容对你有帮助吗？
点一下就好，这将影响下一期。