IEEE Cipher --- Items from security-related news (E172)





  • Did They Or Didn't They? Only Lockbit Knows for Sure
    Hackers who breached ION say ransom paid; company declines comment

    Date: February 3, 2023
    Publisher: Reuters
    By: Raphael Satter

    Summary:
    International trading through the financial firm ION was hampered for several days due to an apparent ransomware attack by the group known as Lockbit. The hacker group claimed that they were paid not by ION directly but by someone oddly described as a "very rich unknown philanthropist." Allegedly that is why they delisted ION from their hacker "wall of shame", an online list of claimed recent victims.


  • I Thought You Patched the VMware Bug ...
    Italy warns hackers targeting known server vulnerability
    Date: February 5, 2023
    Publisher: Reuters

    Summary:
    A year ago VMware discovered a vulnerability and issued remediation software. This year, Italy's National Cybersecurity Agency ACN announced that thousands of computer servers around the world had been "targeted" by hackers looking to exploit the vulnerability. Dozens of Italian computer systems were affected by breaches. The U.S. Cybersecurity and Infrastructure Security Agency said it as working to assess impacts and possibly to provide assistance.


  • Inglis, Outglis
    Top White House cyber official set to retire next week

    Date: February 8, 2023
    Publisher: CNN
    By: Sean Lyngaas

    Summary:
    Chris Inglis, who has over four decades of government experience in national security, and who has been the White House's National Cyber Director, resigned on February 15. In December, Republican and Democratic lawmakers with interest in cybersecurity asked Inglis to finish the national cybersecurity strategy before leaving, but now it was unclear when the strategy will be completed (see below). Former Microsoft executive Kemba Eneas Walden is now acting director. The most recent activity mentioned on the OCND webpage is a roundtable on "The State of Cybersecurity in the Black Community."


    FACT SHEET: Biden-Harris Administration Announces National Cybersecurity Strategy

    Date: March 02, 2023
    Publisher: White House
    By: Press Release

    Summary:

    The US National Cybersecurity Strategy describes itself as making fundamental shifts in roles, responsibilities, and resources. It markedly addresses what we assume are software and hardware manufacturers. The two key points are:
  • Election Meddling as a Service
    Revealed: the hacking and disinformation team meddling in elections
    'Team Jorge' unit exposed by undercover investigation
    Group sells hacking services and access to vast army of fake social media profiles
    Evidence unit behind disinformation campaigns across world
    Mastermind Tal Hanan claims covert involvement in 33 presidential elections
    Tal Hanan has always denied any wrongdoing.

    Date: 14 Feb 2023
    Publisher: The Guardian
    By: Stephanie Kirchgaessner, Manisha Ganguly, David Pegg, Carole Cadwalladr and Jason Burke

    Summary:
    The French nonprofit organization, Forbidden Stories, coordinated a team of journalists to uncover the activities of an Israeli disinformation service called "Team Jorge." They have a "vast army" of false personae (avatars) on social media, some with financial accounts backed by assets like credit cards and cryptocurrencies. They can be hired as election influencers by governments and corporations. The group's leader is Tal Hanan, someone who is said to have been working in this disinformation area for two decades. He denies any "wrongdoing".

    The original report from Forbidden Stories.


  • Russia Revs Up Cyber Attacks Against Germany
    German minister warns of 'massive' danger from Russian hackers
    Nancy Faeser says Ukraine war has exacerbated German cybersecurity concerns

    Date: 26 Feb 2023
    Publisher: The Guardian
    By: Kate Connolly

    Summary:
    Germany reports that it sees increases in cyber-attacks each time it takes an action that opposes Russia's war in Ukraine. The German government announced expansion of its Federal Office for Information Security (BSI). They have called on federal and regional sectors to repel attacks and develop new protection methods. A Google analysis indicated that Moscow was actively recruiting private hacker groups.

    The actual scope of the current damage is unclear, but in 2015 the German parliament IT infrastructure was severely compromised by what is believed to be a Russian attack.