Beyond Data

Our partner Group-IB was recognized in Gartner's latest report for its “Group-IB Incident Response Retainer.” In today's rapidly evolving threat landscape, swift and decisive action is crucial to minimize damage and maintain business continuity. Group IB's ability to deliver rapid response services is a valuable asset for organizations seeking timely and effective protection against emerging threats. #Cybersecurity #IR #DFIR #TI #Gartner

Recent findings reveal that around 43% of Meta ads featuring the UK Prime Minister are part of sophisticated cryptocurrency scam. Fraudsters used AI deepfake technology to create misleading videos of Keir Starmer and Prince William endorsing a fake cryptocurrency platform." Since July 4, 2024, over 250 ads have been spotted, with scammers spending £21,053 to lure victims. Deepfake technology poses significant risks from a brand protection perspective. Brands and public figures must proactively address the risks posed by deepfakes through comprehensive strategies that include monitoring and crisis management to mitigate potential damage and maintain trust in their brand. #DRP #BrandProtection #DigitalRiskProtection #Cybersecurity #threathunting #cyberthreatintel #cti #infosec #threatintel #securityawareness #emailsecurity #phishing

ببالغ الحزن والأسى تنعى شركة بيوند داتا المهندس سلطان بن عبد العزيز الدغيثر الرئيس التنفيذي لشركة زين السعودية Zain KSA سائلين المولى عز وجل أن يتغمد الفقيد بواسع رحمته ويسكنه فسيح جناته ويلهم أهله وذويه الصبر والسلوان. إنا لله وإنا إليه راجعون

A renowned Hospital in Egypt has reportedly fallen victim to LockBit ransomware. The group has announced plans to publish the hospital's data on July 26, 2024, with sample screenshots already shared on their dark web portal. This incident underscores the growing ransomware threat in the healthcare sector, emphasizing the urgent need for robust cybersecurity strategies to safeguard sensitive information. #Cybersecurity #threathunting #cyberthreatintel #cti #infosec #threatintel #securityawareness #emailsecurity #phishing #dataprivacy

Multiple reports came out on June 24 that the notorious LockBit group was negotiating with the Federal Reserve Board over a ransom payment in exchange for not making public 33 terabytes of government data. The Fed has not yet commented on the claims made by LockBit. At this stage, the validity of the breach is uncertain as LockBit has not provided samples of the stolen data, which raises questions about whether the hack is legitimate. If real, that would be arguably the largest-ever cyber attack on a financial institution of all time, and the repercussions could be dreadful.

Eid Mubarak

AI Voice Generator App Used to Drop Gipy Malware A new infostealer malware campaign called Gipy targets users by disguising it as an AI voice-changing application. Gipy malware, which emerged in early 2023, allows attackers to steal data, mine cryptocurrency, and install additional malware. In this case, threat actors promise victims a legitimate AI voice-altering app; and as it works as promised after installation, Gipy malware is delivered in the background. When Gipy is run, password-protected malware from GitHub is launched. Source: Dark Reading

The Malicious Comment! A positive comment was posted along with a “thank you” image on a product page that concealed a malicious vulnerability. The guilty secret hidden inside this particular piece of code was designed to let hackers bypass security controls and steal the personal identifying information of online shoppers. The comment and image stayed on the site for three years! Malicious actors often try to hide their own code within such images, which brings us to the practice of steganography; which hides data in plain sight, in this case, inside an image. The altered image contained hidden instructions and the address of a compromised domain and the JavaScript on the page was using the hidden information to communicate with it. Source: The Hacker News

There were clear signs of an increase in cyber-attacks which appeared to be conducted by Chinese actors. They were accused of a sweeping cyber espionage campaign that allegedly hit millions of people. The conspiracy involved over 10,000 malicious emails. This group is named Advanced Persistent Threat Group 31 (APT31) it was stated that their purpose is to infiltrate specific targets and steal important information and intelligence, whether it be political, military, or commercial. They target thousands of foreign politicians and foreign policy experts. Users should exercise caution for phishing attempts, and avoid opening emails, clicking on links, or downloading attachments from unknown sources. Monitoring APT's IOC's and adopting reliable email security technology play an essential role in protecting you against targeted phishing attacks and email fraud with real-time threat intelligence, that helps with stopping ransomware and zero-day malware attempts. #Cybersecurity #threathunting #cyberthreatintel #cti #infosec #threatintel #securityawareness #emailsecurity #phishing

LockBit releases 64 GB of data extracted from one of the biggest leading pharmacy chains in Egypt. The pharmacy chain was hit by a cyber attack by hackers where the data was leaked on the Dark Web. The hackers asked for millions of dollars for the company to recover its data. In the ever-changing threat landscape, staying informed is the first step to getting protected. Proactive measures are essential to safeguarding your company from different types of attacks. #Cybersecurity #threathunting #cyberthreatintel #cti #infosec #threatintel #securityawareness