This Week’s Top 5 Cybersecurity News Stories June 2024 | 04
Cybersecurity threats are evolving constantly as threat actors look to gain access to your data and money. To help you stay secure, we have searched the internet for the top five cybersecurity news stories of the week that we think you should be aware of. No story is too big or small, as we look at threats from espionage to security flaws in every day devices:
1. TeamViewer Detects Security Breach in Corporate IT Environment
TeamViewer disclosed an “irregularity” in its internal IT environment on June 26, 2024. They activated their response team, investigated with cybersecurity experts, and implemented remediation measures. TeamViewer assured that no customer data was impacted. The U.S. Health-ISAC reported threat actors exploiting TeamViewer, possibly linked to APT29, a Russian state-sponsored group recently involved in breaches at Microsoft and HPE.. For more about this story click here
2. Chinese and N. Korean Hackers Target Global Infrastructure with Ransomware
Between 2021 and 2023, threat actors tied to China and North Korea conducted ransomware and data encryption attacks on government and critical infrastructure worldwide. The ChamelGang (aka CamoFei) targeted institutions like AIIMS in India and Brazil’s Presidency using CatB ransomware. These attacks aim to sabotage, misattribute, and erase evidence, blurring lines between cybercrime and cyber espionage. For more about this story click here
3. Beware of Weaponized Notezilla, RecentX, & Copywhiz Windows Tools that Deliver Stealing Malware
Cybersecurity firm Rapid7 has discovered that popular Windows tools Notezilla, RecentX, and Copywhiz, developed by India’s Conceptworld, have been compromised to deliver malware. The trojanized installers, found on Conceptworld’s official site, execute malware that steals browser credentials, cryptocurrency information, and logs keystrokes. Rapid7 advises verifying software integrity, checking for hidden tasks, and re-imaging affected systems to mitigate risks. For more about this story click here
4. North Korean Hackers Using New ‘HappyDoor’ Malware Used In Email Attacks
Hackers favor email attacks for their speed and low cost, easily deceiving recipients with legitimate-looking emails. North Korean hackers, specifically the Kimsuky group, use “HappyDoor” malware in email attacks. Active from 2021 to 2024, HappyDoor is distributed via spearphishing and evolves to evade detection. It steals data through screen capture, keylogging, and file leakage, communicating with C&C servers. For more about this story click here
5. Microsoft informs customers that Russian hackers spied on emails
In June, Microsoft revealed that Russian hackers not only spied on its staff inboxes but also stole customer emails. This breach, six months after its initial disclosure, highlights the scale of the intrusion and Microsoft’s increasing regulatory scrutiny. The Midnight Blizzard group targeted cybersecurity researchers, and Microsoft’s ongoing investigation aims to keep affected customers informed. For more about this story click here
At DIESEC, we have experts on hand waiting to help you with all of your cybersecurity needs, from ensuring your system is safe and secure to teaching your employees how not to fall victim to social engineering ploys.
For more information please contact us now!