Security Affairs
Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Russia-Ukraine, who are the soldiers that crowd cyberspace?

While Russia is invading Ukraine, multiple forces are joining in the conflict, especially in the cyber space, let’s analyze them The analysis of the current scenario in cyberspace is not easy due to the presence of multiple threat actors and the difficulty of attributing the attacks. Security group CyberKnow shared an interesting analysis about the […]

Ukraine CERT-UA backdoor SSU PathWiper wiper

While Russia is invading Ukraine, multiple forces are joining in the conflict, especially in the cyber space, let’s analyze them

The analysis of the current scenario in cyberspace is not easy due to the presence of multiple threat actors and the difficulty of attributing the attacks.

Security group CyberKnow shared an interesting analysis about the group, their operations and the channels they are using to disclose their operations.

As reported in the following table published by CyberKnow, Russian and Belarussian APT groups (Gamaredon, SandWorm, GhostWrite), ransomware gangs like Conti and Stormous, and groups of alleged activists like are supporting Russia.

Update 3–2 March cyber group tracker: Ukraine-Russia war 2022. – Source CyberKnown

“Here we are, the third update of the Cyber group tracker for the Ukraine-Russia war and I continue to add more groups each day. I am still amazed about the number of groups. It seems with every attack new groups are entering the battle.” reads the post of CyberKnown.

“It continues to be congested and contested — this is an insight into what the global community can expect in any future conflict big or small.”

The level of entropy is maximum and could advantage information warfare operarations and false flag activities.

Recent data leaks of Conti gangs and Trickbot operation revealed support and relationship with the Russian intelligence, this is a scaring scenario because could rapidly extend the battlefield to international organizations operating on a global scale.

The activity of Anonymous and its affiliates could be exploited by nation-state actors to carry out parallel, independent and stealth operations that are advantaged by the pressure of the popular activist on Russian targets.

The attribution of these attacks is quite impossible for this important it is essential to share information on threat actors, this is the only way to dissolve this thick fog.

For real-time updates: https://twitter.com/Cyberknow20

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, Ukraine)

[adrotate banner=”5″]

[adrotate banner=”13″]