Financially Motivated UNC3944 Threat Actor Expands to Ransomware Deployment
UNC3944, also known as 0ktapus or Scatter Swine, is a financially motivated threat actor that has recently started using ransomware as part of their monetization strategies.
UNC3944, also known as 0ktapus or Scatter Swine, is a financially motivated threat actor that has recently started using ransomware as part of their monetization strategies.
Less than 7% of organizations have implemented MFA protection for critical resources, leaving them vulnerable to attacks, while the growing number of stolen credentials in the APAC region underscores the importance of IAM in securing access to critical systems.
A new variant of the NodeStealer malware is specifically targeting Facebook Business accounts in Southern Europe and North America, aiming to steal cookies and passwords from web browsers and compromising accounts on platforms like Facebook, Gmail, and Outlook.
Cybercriminals exploit vulnerabilities in IoT devices to create powerful botnets capable of launching devastating DDoS attacks, posing risks to essential infrastructures and leading to malicious activities such as data theft, ad fraud, and cryptocurrency mining. Mitigating these attacks requires a multi-layered approach and collaboration between industry stakeholders.
The US Department of Defense’s 2023 Cyber Strategy highlights China’s cyber attacks as a strategic maneuver to gain an advantage in potential military conflicts with the US, emphasizing the need to enhance resilience and collaborate with allies and private industry partners to strengthen cyber defenses.
Peach Sandstorm, an Iranian state-operated cyberespionage group, has been conducting a global cyber-espionage campaign since 2013, targeting organizations in various industries and employing tactics such as password spraying attacks and exploiting known vulnerabilities.