US disrupts botnet used by Russia-linked APT28 threat group

The US government has disrupted a network of routers that were being used by the Russia-linked threat group APT28 to conceal malicious cyber activities. 

"These crimes included vast spear-phishing and similar credential harvesting campaigns against targets of intelligence interest to the Russian government, such as US and foreign governments and military, security, and corporate organisations," said the US Department of Justice (DoJ) in a statement.

APT28, tracked by...

IoT Tech Expo: Cybersecurity threats facing medical devices

Patrick Maw, an expert in medical device cybersecurity at University College London Hospitals NHS Foundation Trust, recently gave a talk at IoT Tech Expo Global highlighting the cybersecurity threats facing connected medical devices.

Maw explained that a wide range of medical equipment now connects to healthcare networks, from infusion pumps and CT scanners to mobile devices running medical apps. 

"Software is a medical device in its own right," stated Maw, drawing...

Researchers discover another Mirai variant targeting new IoT vulnerabilities

Security researchers from Palo Alto Networks have discovered another Mirai variant that is targeting new IoT vulnerabilities.

Researchers from Unit 42, the cybersecurity division of Palo Alto Networks, discovered a number of attacks on Feb 16th, 2021 that leveraged vulnerabilities including:

VisualDoor (a SonicWall SSL-VPN exploit).CVE-2020-25506 (a D-Link DNS-320 firewall exploit).CVE-2020-26919 (a Netgear ProSAFE Plus exploit).Possibly CVE-2019-19356 (a Netis WF2419...

Kaji malware targets IoT devices using SSH brute-force attacks

Security researchers have discovered a new malware called Kaji which is targeting IoT devices using SSH brute-force attacks.

Malware is increasingly targeting IoT devices, and it's little surprise why. Statista estimates there are around 20 billion IoT devices installed today, while IDC predicts 41.6 billion devices generating 79.4 zettabytes of data by 2025.

Kaji was uncovered last week by security researcher MalwareMustDie and the experts at Intezer Labs.

The...