* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Friday, August 29, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    ‘Netflix House’ entertainment complexes are coming. Here’s when they open – Los Angeles Times

    Exciting News: Netflix’s House Entertainment Complexes Are Opening Soon!

    ‘Big Brother’s’ Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy – El Paso Inc.

    Big Brother’s Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy

    ‘SNL’ Parts Ways With Emil Wakim Amid Rumored Season 51 Cast Shakeup – yahoo.com

    SNL Shakes Up Season 51 Cast with Emil Wakim’s Surprising Exit

    Do you have a favorable or an unfavorable opinion of Taylor Swift? – YouGov

    Do You Love Taylor Swift or Not? Share Your Thoughts!

    Upload Season 4 Review – yahoo.com

    Upload Season 4 Review: A Thrilling New Chapter Unveiled

    ‘The Roses’ review: Olivia Colman, Benedict Cumberbatch sparkle in dark comedy – Yakima Herald-Republic

    The Roses’ Review: Olivia Colman and Benedict Cumberbatch Shine in Dark Comedy Delight

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Japan’s legacy LCD and chip technology find new home in India – Nikkei Asia

    How Japan’s Breakthrough LCD and Chip Technologies Are Driving Innovation in India

    ITSWC 2025: Thursday sessions guide – Traffic Technology Today

    Your Ultimate Guide to Thursday Sessions at ITSWC 2025

    MC Machinery Technology Summit Showcases Manufacturing Innovations – Modern Machine Shop

    MC Machinery Technology Summit Unveils Cutting-Edge Manufacturing Innovations

    US-ROK Technology Cooperation Faces Rising Tensions – The National Interest

    Rising Tensions Put US-South Korea Technology Partnership to the Test

    The Role of AI and Technology in Shaping the Future of Interactive Entertainment – Technology Org

    How AI and Technology Are Transforming the Future of Interactive Entertainment

    Ten upcoming sports stadiums where technology takes to the field – Dezeen

    10 Futuristic Sports Stadiums Revolutionizing the Game with Cutting-Edge Technology

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    ‘Netflix House’ entertainment complexes are coming. Here’s when they open – Los Angeles Times

    Exciting News: Netflix’s House Entertainment Complexes Are Opening Soon!

    ‘Big Brother’s’ Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy – El Paso Inc.

    Big Brother’s Rylie Jeffries Finally Speaks Out on Katherine Woodman Controversy

    ‘SNL’ Parts Ways With Emil Wakim Amid Rumored Season 51 Cast Shakeup – yahoo.com

    SNL Shakes Up Season 51 Cast with Emil Wakim’s Surprising Exit

    Do you have a favorable or an unfavorable opinion of Taylor Swift? – YouGov

    Do You Love Taylor Swift or Not? Share Your Thoughts!

    Upload Season 4 Review – yahoo.com

    Upload Season 4 Review: A Thrilling New Chapter Unveiled

    ‘The Roses’ review: Olivia Colman, Benedict Cumberbatch sparkle in dark comedy – Yakima Herald-Republic

    The Roses’ Review: Olivia Colman and Benedict Cumberbatch Shine in Dark Comedy Delight

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Japan’s legacy LCD and chip technology find new home in India – Nikkei Asia

    How Japan’s Breakthrough LCD and Chip Technologies Are Driving Innovation in India

    ITSWC 2025: Thursday sessions guide – Traffic Technology Today

    Your Ultimate Guide to Thursday Sessions at ITSWC 2025

    MC Machinery Technology Summit Showcases Manufacturing Innovations – Modern Machine Shop

    MC Machinery Technology Summit Unveils Cutting-Edge Manufacturing Innovations

    US-ROK Technology Cooperation Faces Rising Tensions – The National Interest

    Rising Tensions Put US-South Korea Technology Partnership to the Test

    The Role of AI and Technology in Shaping the Future of Interactive Entertainment – Technology Org

    How AI and Technology Are Transforming the Future of Interactive Entertainment

    Ten upcoming sports stadiums where technology takes to the field – Dezeen

    10 Futuristic Sports Stadiums Revolutionizing the Game with Cutting-Edge Technology

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE

January 26, 2024
in Technology
The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE
Share on FacebookShare on Twitter

FROM RUSSIA WITH ROOT —

Hacks by Kremlin-backed group continue to hit hard.

Dan Goodin
– Jan 26, 2024 1:15 pm UTC

The life and times of Cozy Bear, the Russian hackers who just hit Microsoft and HPE

Getty Images

Hewlett Packard Enterprise (HPE) said Wednesday that Kremlin-backed actors hacked into the email accounts of its security personnel and other employees last May—and maintained surreptitious access until December. The disclosure was the second revelation of a major corporate network breach by the hacking group in five days.

The hacking group that hit HPE is the same one that Microsoft said Friday broke into its corporate network in November and monitored email accounts of senior executives and security team members until being driven out earlier this month. Microsoft tracks the group as Midnight Blizzard. (Under the company’s recently retired threat actor naming convention, which was based on chemical elements, the group was known as Nobelium.) But it is perhaps better known by the name Cozy Bear—though researchers have also dubbed it APT29, the Dukes, Cloaked Ursa, and Dark Halo.

“On December 12, 2023, Hewlett Packard Enterprise was notified that a suspected nation-state actor, believed to be the threat actor Midnight Blizzard, the state-sponsored actor also known as Cozy Bear, had gained unauthorized access to HPE’s cloud-based email environment,” company lawyers wrote in a filing with the Securities and Exchange Commission. “The Company, with assistance from external cybersecurity experts, immediately activated our response process to investigate, contain, and remediate the incident, eradicating the activity. Based on our investigation, we now believe that the threat actor accessed and exfiltrated data beginning in May 2023 from a small percentage of HPE mailboxes belonging to individuals in our cybersecurity, go-to-market, business segments, and other functions.”

An HPE representative said in an email that Cozy Bear’s initial entry into the network was through “a compromised, internal HPE Office 365 email account [that] was leveraged to gain access.” The representative declined to elaborate. The representative also declined to say how HPE discovered the breach.

Cozy Bear hacking its way into the email systems of two of the world’s most powerful companies and monitoring top employees’ accounts for months aren’t the only similarities in the two events. Both breaches also involved the compromise of a single device on each corporate network, then escalating that toehold to the network itself. From there, Cozy Bear camped out undetected for months. The HPE intrusion was all the more impressive because Wednesday’s disclosure said that the hackers also gained access to Sharepoint servers in May. Even after HPE detected and contained that breach a month later, it would take HPE another six months to discover the compromised email accounts.

The pair of disclosures, coming within five days of each other, may create the impression that there has been a recent flurry of hacking activity. But Cozy Bear has actually been one of the most active nation-state groups since at least 2010. In the intervening 14 years, it has waged an almost constant series of attacks, mostly on the networks of governmental organizations and the technology companies that supply them. Multiple intelligence services and private research companies have attributed the hacking group as an arm of Russia’s Foreign Intelligence Service, also known as the SVR.

The life and times of Cozy Bear (so far)

In its earliest years, Cozy Bear operated in relative obscurity—precisely the domain it prefers—as it hacked mostly western governmental agencies and related organizations such as political think tanks and governmental subcontractors. In 2013, researchers from security firm Kaspersky unearthed MiniDuke, a sophisticated piece of malware that had taken hold of 60 government agencies, think tanks, and other high-profile organizations in 23 countries, including the US, Hungary, Ukraine, Belgium, and Portugal.

MiniDuke was notable for its odd combination of advanced programming and the gratuitous references to literature found embedded into its code. (It contained strings that alluded to Dante Alighieri’s Divine Comedy and to 666, the Mark of the Beast discussed in a verse from the Book of Revelation.) Written in assembly, employing multiple levels of encryption, and relying on hijacked Twitter accounts and automated Google searches to maintain stealthy communications with command-and-control servers, MiniDuke was among the most advanced pieces of malware found at the time.

It wasn’t immediately clear who was behind the mysterious malware—another testament to the stealth of its creators. In 2015, however, researchers linked MiniDuke—and seven other pieces of previously unidentified malware—to Cozy Bear. After a half decade of lurking, the shadowy group was suddenly brought into the light of day.

Cozy Bear once again came to prominence the following year when researchers discovered the group (along with Fancy Bear, a separate Russian-state hacking group) inside the servers of the Democratic National Committee, looking for intelligence such as opposition research into Donald Trump, the Republican nominee for president at the time. The hacking group resurfaced in the days following Trump’s election victory that year with a major spear-phishing blitz that targeted dozens of organizations in government, military, defense contracting, media, and other industries.

One of Cozy Bear’s crowning achievements came in late 2020 with the discovery of an extensive supply chain attack that targeted customers of SolarWinds, the Austin, Texas, maker of network management tools. After compromising SolarWinds’ software build system, the hacking group pushed infected updates to roughly 18,000 customers. The hackers then used the updates to compromise nine federal agencies and about 100 private companies, White House officials have said.

Cozy Bear has remained active, with multiple campaigns coming to light in 2021, including one that used zero-day vulnerabilities to infect fully updated iPhones. Last year, the group devoted much of its time to hacks of Ukraine.

Page: 1 2 Next →

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : Ars Technica – https://arstechnica.com/?p=1999178

Tags: Russiantechnologytimes
Previous Post

Rocket Report: Iran reaches orbit; Chinese firm achieves impressive landing test

Next Post

Cruise failed to disclose disturbing details of self-driving car crash

Mismatches will not halt Women’s Rugby World Cup momentum, insist organisers – The Guardian

Women’s Rugby World Cup Momentum Unstoppable Despite Mismatches, Organisers Insist

August 29, 2025
Europe Is Spending Big on Defense. Will That Help Its Ailing Economy? – The New York Times

Europe Is Spending Big on Defense. Will That Help Its Ailing Economy? – The New York Times

August 29, 2025
‘Netflix House’ entertainment complexes are coming. Here’s when they open – Los Angeles Times

Exciting News: Netflix’s House Entertainment Complexes Are Opening Soon!

August 29, 2025
CDC director’s firing prompts health concerns : The News4 Rundown – NBC4 Washington

Firing of CDC Director Ignites Nationwide Health Alarm

August 29, 2025
What’s Behind the Political Instability in Thailand – The New York Times

Unraveling the Root Causes of Political Instability in Thailand

August 29, 2025
Drayton Harbor’s bacteria problem – Washington State Department of Ecology (.gov)

Battling the Bacteria Crisis in Drayton Harbor: Essential Facts You Can’t Miss

August 29, 2025
Entomologists, Fellow Scientists Report Negative Impacts of Government Actions – Entomology Today

Entomologists and Scientists Reveal Alarming Consequences of Recent Government Actions

August 28, 2025
Scientists Reveal What’s Inside Mars: It’s Chunky, With a History of Violence – ScienceAlert

Scientists Reveal Mars’ Chunky Interior and Turbulent History

August 28, 2025
These simple life changes can prevent diabetes and dementia – Earth.com

Easy Lifestyle Changes to Lower Your Risk of Diabetes and Dementia

August 28, 2025
Japan’s legacy LCD and chip technology find new home in India – Nikkei Asia

How Japan’s Breakthrough LCD and Chip Technologies Are Driving Innovation in India

August 28, 2025

Categories

Archives

August 2025
MTWTFSS
 123
45678910
11121314151617
18192021222324
25262728293031
« Jul    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (795)
  • Economy (815)
  • Entertainment (21,694)
  • General (16,733)
  • Health (9,856)
  • Lifestyle (828)
  • News (22,149)
  • People (815)
  • Politics (822)
  • Science (16,024)
  • Sports (21,313)
  • Technology (15,795)
  • World (797)

Recent News

Mismatches will not halt Women’s Rugby World Cup momentum, insist organisers – The Guardian

Women’s Rugby World Cup Momentum Unstoppable Despite Mismatches, Organisers Insist

August 29, 2025
Europe Is Spending Big on Defense. Will That Help Its Ailing Economy? – The New York Times

Europe Is Spending Big on Defense. Will That Help Its Ailing Economy? – The New York Times

August 29, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version