User avatar
hrbrmstr
7
Like
What happened last week in exploits, malware, and internet mass exploitation?

Copilot

3 steps completed

Answer

Last week, several significant events occurred in the world of exploits, malware, and internet mass exploitation. The Clop ransomware gang confirmed that they were behind the MOVEit Transfer data-theft attacks, which started on May 27th
1
.
In Chile, an Army corporal was arrested for alleged involvement in Rhysida's ransomware attack on the Chilean army
1
.
Japanese pharmaceutical company Eisai and Australia's largest commercial law firm, HWL Ebsworth, were also targeted by ransomware attacks
1
.
In other news, the Lemon Group, a cybercrime enterprise, has been using millions of pre-infected Android smartphones worldwide to carry out malicious operations, posing significant supply chain risks
2
.
The highest concentration of these infections was found in the U.S., Mexico, Indonesia, Thailand, Russia, South Africa, India, Angola, the Philippines, and Argentina
2
.
Researchers have also identified malicious advertisement campaigns within Google's search engine to distribute the RedLine Stealer, which revolves around themes associated with AI tools
3
.
The CL0P ransomware group exploited the CVE-2023-34362 MOVEit vulnerability, infecting internet-facing MOVEit Transfer web applications with a web shell named LEMURLOOT, which was then used to steal data
4
.
Dish Network, a satellite TV giant, reported that a recent ransomware attack impacted nearly 300,000 people, and its notification suggests a ransom has been paid
5
.
Finally, a new Android malware strain called Goldoson has been found in the official Google Play Store, infecting over 60 legitimate apps
6
.

Related

what is the most common type of malware used in recent attacks
how are cybercriminals exploiting vulnerabilities in AI tools
what are some recent examples of ransomware attacks and their impact