Daily Cybersecurity News November 09, 2022
As the midterm elections come to a close, cyberattacks continue unabated. Multiple Mississippi state websites were brought down by a DDoS attack. Experts predict more of these disruptions. The federal government has warned that Iranian hackers are posing a new threat to the healthcare sector. Do you remember the Vultur trojan? On the Android app store, it received hundreds of thousands of downloads. Here are the top ten stories from the last 24 hours.
A DDoS attack knocked offline the Mississippi secretary of state’s office during the midterm election. A pro-Russian hacker claimed credit for the hack.
The HHS warned against Iranian threat actors impersonating doctors, reporters, and think tank researchers, conducting social engineering schemes to target the healthcare sector.
The U.S. Treasury Department reissued sanctions on Tornado Cash, accusing the crypto mixer platform of helping North Korean state-sponsored hackers launder over $455 million stolen in March.
The Champaign County Clerk’s office, Illinois, reported suffering disruptions in computer server performance due to DDoS attacks on its servers and networks.
Threat actors are using a malicious Android installation package and the Spymax RAT variant to target Indian defense personnel. The RAT imitates the Adobe Reader app.
The Vultur Android banking trojan attained 100,000 downloads on the Google Play Store, stated an advisory by Cleafy. It masquerades as a fake utility app and can evade Google Play defenses.
Cloud9, a new Chrome browser-based botnet, was found leveraging malicious extensions to pilfer online accounts, inject malicious JavaScript code and ads, log keystrokes, and enroll the victim’s browser in DDoS attacks.
Researchers spotted several phishing campaigns leveraging the decentralized Interplanetary Filesystem (IPFS) network to enable attacks, along with hosting malware and phishing kit infrastructure.
An updated version of the IceXLoader malware has, reportedly, infected thousands of personal and enterprise Windows machines worldwide.
Wib, an Israel-based API security firm, raised $16 million in a funding round led by Koch Disruptive Technologies, with Kmehin Ventures, Venture Israel, and others as participants.