The Updated APT Playbook: Tales from the Kimsuky threat actor group

Rapit7 team recently ran across some interesting activity that they believe is the work of the Kimsuky threat actor group, also known as Black Banshee or Thallium. Originating from North Korea and active since at least 2012, Kimsuky focuses primarily on Read More …

New Zealand: Hackers email Mediaworks data breach victims demanding NZ$820

Hackers connected to a MediaWorks data breach are demanding a ransom of US$500 (NZ$820) in cryptocurrency from one of the victims of the data leakage. MediaWorks has confirmed a database containing information from individuals who entered its online competitions has Read More …

Southeast Asia’s three-nation partnership to fight cyber threats

From rampant job scams to sophisticated e-commerce attacks, cyber threats in Southeast Asia are skyrocketing. Singapore reportedly had more than 46,000 cybercrime cases in 2023, including job scams and e-commerce scams, the highest since 2016. Things were almost as bad in Read More …

CIA allegedly made fake social media accounts to troll the Chinese government

The CIA allegedly launched a secret operation to troll Chinese officials and turn public opinion against them through leaked intelligence and negative news on social media. Reuters reports the operation began in 2019 and was also aimed at causing paranoia Read More …

Acer Philippines reports data breach in third-party vendor system

Acer Philippines confirmed through an official statement that a security breach occurred within a third-party vendor’s system. The vendor was responsible for managing Acer Philippines’ employee attendance data, and the breach resulted in the unauthorized access of this information. The Read More …

Australia: OAIC to investigate legal consultant’s data breach

The Australian Information Commissioner has launched an investigation into a law firm that provides legal and consulting services to the government, in relation to a data breach and the publication of some of that data on the dark web. At Read More …

Philippines: Department of Education checking data breach after hacking

The Department of Education (DepEd) is examining its systems for possible data breaches after reports of hackers allegedly harvesting 750 gigabytes of data containing sensitive information on banking details, students, teachers and more. DeepWeb Konek, a collective of cybersecurity practitioners, Read More …

Dead-end job

In November 2023, Group-IB’s Threat Intelligence unit detected a massive malicious campaign targeting employment agencies and retail companies primarily located in the APAC region, to steal and sell sensitive user data. The campaign was attributed to a previously unknown group. Read More …

Classified Japanese diplomatic info leaked after Chinese cyberattacks in 2020

Classified Japanese diplomatic information was leaked following Chinese cyberattacks on the Foreign Ministry in 2020, a government source said Monday, exposing the nation’s digital vulnerability. Japan detected the large-scale attack and release of diplomatic telegrams during a period of government Read More …

Philippines: Cyber attack on Overseas Workers Welfare Administration website foiled

The Department of Information and Communications Technology (DICT) has prevented a cyber attack aimed at taking down the website of the Overseas Workers Welfare Administration (OWWA). At the Saturday News Forum, DICT Undersecretary for Cybersecurity Jeff Ian Dy said the Read More …