Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Federal Indictments in SamSam Ransomware Campaign
Newest First  |  Oldest First  |  Threaded View
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/29/2018 | 1:01:51 PM
Awareness
"The events described in this indictment highlight the need for businesses, healthcare institutions, universities, and other entities to emphasize cyber security, increase threat awareness, and harden their computer networks." I ageee. Awareness is the key here and everywhere.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/29/2018 | 1:01:50 PM
Awareness
"The events described in this indictment highlight the need for businesses, healthcare institutions, universities, and other entities to emphasize cyber security, increase threat awareness, and harden their computer networks." I ageee. Awareness is the key here and everywhere.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/29/2018 | 1:00:22 PM
Card data
some evidence to suggest that they were investigating the possibility of stealing card payment data This explains what they are after, but why government?
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/29/2018 | 12:59:07 PM
High
have collected over $6 million dollars in ransom payments to date, and caused over $30 million dollars in losses to victims. Interestingly high numbers. It seems we tend to pay ransomware.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/29/2018 | 12:57:48 PM
Re: Win for the good guys
Now, continue to take down these scum actors. It is going to be hard if they are not in US.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
11/29/2018 | 12:57:02 PM
SamSam
It seems they were mainly targeting government. What was their main objective I wonder. :))
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
11/29/2018 | 7:08:24 AM
Win for the good guys
Another indictment too of Iran - hardly a friendly state to us.  Now, continue to take down these scum actors.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-22392
PUBLISHED: 2021-08-02
There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification bypass and directions to abnormal addresses.
CVE-2021-22396
PUBLISHED: 2021-08-02
There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation.Affected product versions include:eCNS280_TD...
CVE-2021-22397
PUBLISHED: 2021-08-02
There is a privilege escalation vulnerability in Huawei ManageOne 8.0.0. External parameters of some files are lack of verification when they are be called. Attackers can exploit this vulnerability by performing these files to cause privilege escalation attack. This can compromise normal service.
CVE-2021-22398
PUBLISHED: 2021-08-02
There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions incl...
CVE-2021-22412
PUBLISHED: 2021-08-02
There is an Integer Overflow Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause random kernel address access.