* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Saturday, October 25, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    CNN Launches New Show – What to Know About Host Elex Michaelson – Central Oregon Daily

    Get to Know Elex Michaelson: The Dynamic New Host Taking CNN by Storm

    Johnny Depp Set To Finally Make His Big Hollywood Comeback After Amber Heard Controversy – Yahoo

    Johnny Depp Set for a Triumphant Hollywood Comeback Following Amber Heard Controversy

    ‘Chainsaw Man — The Movie: Reze Arc’ Review: Hit Manga Gets an Ultra-Violent, Surprisingly Emotional Big-Screen Adaptation – Yahoo

    Chainsaw Man – The Movie: Reze Arc Review: A Brutal and Unexpectedly Emotional Big-Screen Adaptation

    Reba McEntire Details Personal Relationship With Late Stepson Brandon Blackstock – KNDU

    Reba McEntire Shares Emotional Tribute to Her Late Stepson Brandon Blackstock

    Sacramento city leaders approve adding 2 entertainment zones in midtown – CBS News

    Sacramento City Leaders Approve Two Thrilling New Entertainment Zones in Midtown

    AMC brings first new Dolby Experience to Gwinnett since 2017 – Wyoming News Now

    AMC Launches First New Dolby Experience in Gwinnett Since 2017

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Ghost Tapping is exploiting tap-to-pay technology in order to steal your money; what your need to know – ABC7 New York

    Ghost Tapping: How Thieves Are Using Tap-to-Pay Technology to Steal Your Money and What You Need to Know

    New technology for grading and packing dates – FreshPlaza

    Revolutionary Technology Transforms Date Grading and Packing Process

    Project underway to upgrade technology on 911 towers in Kanawha County – WCHS

    Kanawha County Launches Major Upgrade to 911 Tower Technology

    Next steps: Technology opens new options for greater mobility – Missouri Independent

    Next Steps: How Technology is Opening Exciting New Doors to Greater Mobility

    Rydberg Technologies Inc. Announces Launch of Rydberg Photonics in Berlin – The Quantum Insider

    Rydberg Technologies Launches Exciting New Photonics Division in Berlin

    A look into new technology at Columbia University that could help prevent a dangerous pregnancy complication – ABC7 New York

    A look into new technology at Columbia University that could help prevent a dangerous pregnancy complication – ABC7 New York

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    CNN Launches New Show – What to Know About Host Elex Michaelson – Central Oregon Daily

    Get to Know Elex Michaelson: The Dynamic New Host Taking CNN by Storm

    Johnny Depp Set To Finally Make His Big Hollywood Comeback After Amber Heard Controversy – Yahoo

    Johnny Depp Set for a Triumphant Hollywood Comeback Following Amber Heard Controversy

    ‘Chainsaw Man — The Movie: Reze Arc’ Review: Hit Manga Gets an Ultra-Violent, Surprisingly Emotional Big-Screen Adaptation – Yahoo

    Chainsaw Man – The Movie: Reze Arc Review: A Brutal and Unexpectedly Emotional Big-Screen Adaptation

    Reba McEntire Details Personal Relationship With Late Stepson Brandon Blackstock – KNDU

    Reba McEntire Shares Emotional Tribute to Her Late Stepson Brandon Blackstock

    Sacramento city leaders approve adding 2 entertainment zones in midtown – CBS News

    Sacramento City Leaders Approve Two Thrilling New Entertainment Zones in Midtown

    AMC brings first new Dolby Experience to Gwinnett since 2017 – Wyoming News Now

    AMC Launches First New Dolby Experience in Gwinnett Since 2017

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Ghost Tapping is exploiting tap-to-pay technology in order to steal your money; what your need to know – ABC7 New York

    Ghost Tapping: How Thieves Are Using Tap-to-Pay Technology to Steal Your Money and What You Need to Know

    New technology for grading and packing dates – FreshPlaza

    Revolutionary Technology Transforms Date Grading and Packing Process

    Project underway to upgrade technology on 911 towers in Kanawha County – WCHS

    Kanawha County Launches Major Upgrade to 911 Tower Technology

    Next steps: Technology opens new options for greater mobility – Missouri Independent

    Next Steps: How Technology is Opening Exciting New Doors to Greater Mobility

    Rydberg Technologies Inc. Announces Launch of Rydberg Photonics in Berlin – The Quantum Insider

    Rydberg Technologies Launches Exciting New Photonics Division in Berlin

    A look into new technology at Columbia University that could help prevent a dangerous pregnancy complication – ABC7 New York

    A look into new technology at Columbia University that could help prevent a dangerous pregnancy complication – ABC7 New York

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

Iranian cyberspies target US defense orgs with a brand new backdoor

December 23, 2023
in Technology
Iranian cyberspies target US defense orgs with a brand new backdoor
Share on FacebookShare on Twitter

Infosec in brief Iranian cyberspies are targeting defense industrial base organizations with a new backdoor called FalseFont, according to Microsoft.

In a series of Xeets posted Thursday, Redmond’s threat intel team said it spotted a nation-state backed gang it calls Peach Sandstrom attempting to deliver the (presumably Windows) malware to defense-sector employees.

“FalseFont is a custom backdoor with a wide range of functionalities that allow operators to remotely access an infected system, launch additional files, and send information to its C2 servers,” Microsoft said. “It was first observed being used against targets in early November 2023.”

Mandiant, which tracks the Iran-backed crew as APT33, says it targets organizations in the US, Saudi Arabia and South Korea for “strategic cyberespionage,” with a particular interest in both commercial and military aviation companies as well as those in the energy sector with ties to petrochemical production.

“We identified APT33 malware tied to an Iranian persona who may have been employed by the Iranian government to conduct cyber threat activity against its adversaries,” the threat hunters said in an alert updated in October.

In research published a month earlier, Microsoft said it had seen the crew engaged in password spraying attempts against “thousands of organizations.”

When these brute-force attacks were successful, Peach Sandstorm then used a combination of publicly available and custom tools for to snoop around on the network, maintain persistence and move laterally through the victim’s IT systems, we’re told. 

“In a small number of intrusions,” Redmond added, “Peach Sandstorm was observed exfiltrating data from the compromised environment.”

Hundreds of e-commerce sites compromised by card stealers

Cyber crooks compromised 443 online shops, using JavaScript-sniffers to steal these e-merchants’ customers’ credit card or payment information, according to Europol.

The coordinated effort to combat digital skimming attacks included cops from 17 countries, the European Union Agency for Cybersecurity (ENISA), and private-sector security shops Group-IB and Sansec.

Over the course of two months, the law enforcement agencies notified the online retailers that their customers’ payment details had been stolen as part of the crooks’ online fraud scheme.

Lapsus$ teen sentenced to indefinite detention in hospital after Nvidia, GTA cyberattacks

Four in five Apache Struts 2 downloads are for versions featuring critical flaw

Mozilla decides Trusted Types is a worthy security feature

Something nasty injected login-stealing JavaScript into 50K online banking sessions

In these attacks, thieves use snippets of JavaScript code to intercept customers’ card data during the online checkout process without the retailers or customers realizing they’ve been compromised. They often go undetected for a long time — and by the time they are spotted, the crooks have already been on shopping sprees of their own, or put the financial info up for sale on illicit marketplaces. 

Countries participating in the Greece-led effort include Albania, Belgium, Bosnia and Herzegovina, Colombia, Croatia, Finland, Germany, Georgia, Hungary, Moldova, Netherlands, Poland, Romania, Spain, the United Kingdom and the United States.

During the operation, Group-IB’s threat intelligence team identified 23 families of JS-sniffers, including ATMZOW, health_check, FirstKiss, FakeGA, AngryBeaver, Inter and R3nin, we’re told. The security firm says, as of the end of 2023, there’s 132 known JS-sniffer families that have been used to compromise websites across the globe.

Critical vulnerabilities of the week

We’ve got some end-of-the year critical vulnerabilities including at least one that’s already been found and exploited in the wild. So before you sign off for the holiday break, get to patching. And pray for a Christmas miracle: No more zero-days in 2023.

Chrome bug under exploit — CVE-2023-7024: This one doesn’t yet have a CVSS rating, but Google classified it as high severity, and warns that an exploit for this heap buffer overflow vulnerability in WebRTC is making the rounds. Reported by Clément Lecigne and Vlad Stolyarov of Google’s Threat Analysis Group on 2023-12-19

Apple security updates — CVE-2023-42940 and more: Apple released security updates to address vulnerabilities in Safari, iOS, iPadOS, and macOS Sonoma, but only released details and a CVE for one of these. It’s a session rendering issue in macOS Sonoma that could be exploited to steal sensitive information.

CVSS 9.8 — Multiple CVEs: Ivanti’s Avalanche enterprise mobile device management product contains 12 memory corruption bugs that could be exploited by sending specially crafted data packets to the Mobile Device Server, resulting in denial of service  or remote  code execution.

CVSS 9.8 — Multiple CVEs: EuroTel ETL3100 radio transmitters, versions v01c01 and v01x37, are vulnerable to three bugs that could allow an attacker to gain full access to the system, disclose sensitive information. or access hidden resources.

CVSS 9.6 — Multiple CVEs: EFACEC BCU 500 control and automation devices are susceptible to uncontrolled resource consumption and cross-site request forgery flaws that could allow a denial-of-service condition or compromise the web application.

Russian infosec worker to be extradited to Moscow

Kazakhstan will reportedly extradite a network security specialist to Moscow, despite the US government’s demand to send him to Washington.

The Eastern Bloc country detained Nikita Kislitsin, an employee of Russian infosec shop FACCT, on June 22 at the request of the US, which accused him of committing cyber crimes, according to a statement by his employer.

“According to the information we have, the claims against Kislitsin are not related to his work at FACCT, but are related to a case more than ten years ago when Nikita worked as a journalist and independent researcher,” the statement said, presumably referring to his work as former editor of Hacker magazine.

The US extradition request seems to be related to earlier charges against Kislitsin, who is accused of breaking into the social networking service Formspring in 2012. 

A 2014 indictment [PDF] alleges that, after breaking and entering, Kislitsin stole usernames, email addresses, and passwords, and then tried to sell the stolen database for 5,000 euros a pop.

Shortly after the Feds demanded Kislitsin be extradited to America, Moscow came out with its own extradition request, which appears to have won the battle — at least according to the the General Prosecutor’s Office of the Russian Federation.

On Thursday, the government agency said Kislitsin will be sent back to Russia where he will face criminal charges related to hacking. 

“According to the investigation, in October 2022, Kislitsin, together with his accomplices, unlawfully gained access to the server data of one of the commercial organizations,” the general prosecutor’s statement said. “After this, they were copied.”

After allegedly stealing the org’s data, Kislitsin then tried to extort the firm for $550,000 rubles in cryptocurrency. ®

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : The Register – https://go.theregister.com/feed/www.theregister.com/2023/12/23/iranian_cyberspies_target_us_defense/

Tags: cyberspiesIraniantechnology
Previous Post

Windows 12: Savior of PC makers, or just an apology for Windows 11?

Next Post

NASA’s Detonation Engine Revs Up for 4 Minutes in Breakthrough Test

Politics | Oct 25th 2025 Edition – The Economist

Politics | Oct 25th 2025 Edition – The Economist

October 25, 2025
Nutritional supplements boost baby coral survival – EurekAlert!

How Nutritional Supplements Are Boosting Baby Coral Survival Rates

October 25, 2025
Scientists Are One Step Closer to Letting Humans ‘Breathe’ Through Their Butts – Yahoo

Scientists Are One Step Closer to Letting Humans ‘Breathe’ Through Their Butts – Yahoo

October 25, 2025
Bizarre Crystals in Titan’s Lakes Could Break a Fundamental Rule of Chemistry – ScienceAlert

Strange Crystals Found in Titan’s Lakes Challenge a Fundamental Chemistry Rule

October 25, 2025
Mortgage Rates Inch Toward 6% as Fed Weighs October Cut – IslanderNews.com

Mortgage Rates Surge Near 6% Amid Speculation of October Fed Rate Cut

October 25, 2025
Ghost Tapping is exploiting tap-to-pay technology in order to steal your money; what your need to know – ABC7 New York

Ghost Tapping: How Thieves Are Using Tap-to-Pay Technology to Steal Your Money and What You Need to Know

October 25, 2025
This Week in Sports Trivia: October 23, 2025 – The Athletic – The New York Times

Think You’re a Sports Expert? Take on This Week’s October 23, 2025 Trivia Challenge!

October 25, 2025
How to watch the 2025 MLB World Series: Dodgers vs. Blue Jays game schedule, channels, streaming, when is Shohei Ohtani starting and more – Yahoo Sports

Ultimate Guide to Watching the 2025 MLB World Series: Dodgers vs. Blue Jays Game Schedule, Channels, Streaming, and Shohei Ohtani’s Start Time

October 24, 2025
A circular economy approach for the global lithium-ion battery supply chain – Nature

Revolutionizing the Global Lithium-Ion Battery Supply Chain Through a Circular Economy Approach

October 24, 2025
CNN Launches New Show – What to Know About Host Elex Michaelson – Central Oregon Daily

Get to Know Elex Michaelson: The Dynamic New Host Taking CNN by Storm

October 24, 2025

Categories

Archives

October 2025
M T W T F S S
 12345
6789101112
13141516171819
20212223242526
2728293031  
« Sep    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (885)
  • Economy (906)
  • Entertainment (21,777)
  • General (17,791)
  • Health (9,947)
  • Lifestyle (919)
  • News (22,149)
  • People (907)
  • Politics (917)
  • Science (16,117)
  • Sports (21,406)
  • Technology (15,886)
  • World (889)

Recent News

Politics | Oct 25th 2025 Edition – The Economist

Politics | Oct 25th 2025 Edition – The Economist

October 25, 2025
Nutritional supplements boost baby coral survival – EurekAlert!

How Nutritional Supplements Are Boosting Baby Coral Survival Rates

October 25, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version