UK: Thousands of Afghans, troops and civil servants may be victims of new data breach

Some 3,700 Afghans, British troops and civil servants may have fallen victim to a new data breach, after an incident involving a company linked to the Ministry of Defence. Stansted-based Inflite The Jet Centre Ltd suffered a data security incident Read More …

British spies and SAS named in Afghan data breach

The identities of more than 100 British officials, including members of the special forces and MI6, were compromised in a data breach that also put thousands of Afghans at risk of reprisal, it can be reported. The latest fallout from Read More …

Payout offered to Afghans hit by UK data breaches

Afghan nationals whose personal information was mistakenly exposed by the Ministry of Defence in 2021 will be offered up to £4,000 each in compensation, the government has said. The data breaches affected 277 people, some of whom had worked for Read More …

U.K. MoD breach of Afghans’ data ‘could have posed threat to life in Taliban’s hands’

The Ministry of Defence has been fined £350,000 for an “egregious” data breach that exposed the personal information of Afghan nationals seeking to flee to the UK after the Taliban takeover. Details belonging to 265 people were mistakenly copied in Read More …

HrServ – Previously unknown web shell used in APT attack

In the course of our routine investigation, we discovered a DLL file, identified as hrserv.dll, which is a previously unknown web shell exhibiting sophisticated features such as custom encoding methods for client communication and in-memory execution. Kaspersky analysis of the Read More …

Meta links US military to fake social media influence campaigns

In its latest quarterly threat report, Meta said it had detected and disrupted influence operations originating in the US, and it calls out those it believes are responsible: the American military. Meta said it picked up on three major covert Read More …

Transparent Tribe APT returns to strike India’s government and military

The Transparent Tribe hacking group is back with a new malware arsenal and victim list including India’s government and military. Active since at least 2013, the advanced persistent threat (APT) group operates in at least 30 countries. However, the APT Read More …

GhostEmperor: From ProxyLogon to kernel mode

While investigating a recent rise of attacks against Exchange servers, we noticed a recurring cluster of activity that appeared in several distinct compromised networks. This cluster stood out for its usage of a formerly unknown Windows kernel mode rootkit that Read More …

Russian state hackers use new TinyTurla malware as secondary backdoor

Russian state-sponsored hackers known as the Turla APT group have been using new malware over the past year that acted as a secondary persistence method on compromised systems in the U.S., Germany, and Afghanistan. Named TinyTurla due to its limited Read More …