-
Energy infrastructure in Ukraine finds itself on the front line in its war with Russia as nation state cyber threat actors target critical control systems. Chinese companies are developing hardware-based malware as present and future cyber threats to global energy infrastructure rise. In December 2015, a year after the Crimean Peninsula in Ukraine was illegally…
-
The major cyber threats facing the energy sector include ransomware, phishing, malware, vulnerability exploitation, supply chain issues, and DDoS attacks. These attacks may be carried out by state-sponsored threat actors, highly-organised criminal gangs, hacktivist collectives or even individuals acting alone. The energy sector is a prime target for cyber criminals for a variety of reasons:…
-
November has been a rollercoaster month for the crypto landscape after we witnessed FTX, one of the largest exchanges collapse, unleashing all hell onto the cryptocurrency community. However, while this has held the focus, amongst this noise there have been some innovative threats to the sector questioning the importance of anonymity, communication and security testing.…
-
Due to the nature of its business and the way in which it functions, the financial sector is a prime target for cyber criminals. The major cyber threats facing these institutions include ransomware, phishing, malware, digital fraud, vulnerability exploitation, supply chain issues, and DDoS attacks. A brief overview of some of the groups currently targeting…
-
Introduction October held some of the most innovative attack vectors to date, with spam attacks attempting to cripple the efficiency of a chain; the exposure of personal information from hundreds of thousands of users, tied in with their transaction history; and a supply-chain style matter arising from issues covered in last month’s report. Fitting the trend,…
-
Phishing campaigns continue to increase globally. These operations offer an easy route for cybercriminals to generate revenue, steal credentials and spread malware. Cyjax has recently investigated a sophisticated, large-scale phishing campaign that exploits the reputation of international, trusted brands, and targets businesses in multiple verticals including retail, banking, travel, pharmaceuticals, travel and energy. We are…
-
We are living in extraordinary times. Global conflict has moved from peace time to war footing which is being enhanced by civilian armies of ‘pseudo authorised and encouraged’ cyber volunteers. In addition to this merger between civilian and military, the world is seeing a significant increase in hacktivism, based around a number of ideals, including…
-
Despite a previous tumultuous month, with large-scale sanctions and clamp downs on crypto-based cybercrime, September has been no different in the scale and gravitas of attacks. This month holds significance within the crypto community as we saw “The Merge” take place on the Ethereum network, in a big effort to reduce energy consumption. This event…
-
Utility providers (energy, gas, water, sewage and oil) are targets for both standalone threat actors and large or state-sponsored threat groups. If an Industrial Control System (ICS) or Critical National Infrastructure (CNI) network were to be compromised, threat actors could gain valuable information, disrupt services, and extort money from the providers. Also, customers are vulnerable…
-
August was an action-packed month in the cryptocurrency space, filled with a wide range of hacks and scams. One of the most prominent attacks seen this month was Ice Phishing, with one incident resulting in around half a million dollars’ worth of assets lost to the scam. The growth of the cryptocurrency space is showing…
-
There are interesting things happening in Kazakhstan, just as an important summit being attended by President Vladimir Putin and China’s President Xi Jinping, along with the leaders of India and Iran, takes place in Central Asia this week. According to several unconfirmed reports, Kazakhstan is planning to withdraw from its membership of the Collective Security…
-
Research and Development (R&D) is a vital part of business for many companies and a significant proportion of the GDP of leading global economies. Advanced R&D provides an attractive target for a wide range of attackers seeking to steal the “crown jewels” of intellectual property. R&D activities often involve trying out new technologies. Supply chain…