Cybercrime - Onlineportal von IT Management

Cyber espionage on a new level

SideWinder now also attacks nuclear power plants

10. March, 2025 - 12:15

The notorious advanced persistent threat (APT) group SideWinder has refined its attack tactics and significantly expanded its geographical reach. According to recent analyses by Kaspersky, the group is now specifically targeting nuclear power plants and energy facilities.

Best Practices

LLMJacking: Cybercriminals hijack DeepSeek

12. February, 2025 - 12:31

Since the discovery of LLMJacking by the Sysdig Threat Research Team (TRT) in May 2024, this threat vector has evolved rapidly. Just as large language models (LLMs) are constantly improving and finding new applications, cybercriminals are also adapting and using new ways to gain unauthorized access to these powerful

Data Stealer SparkCat

Malware found in apps in the AppStore and Google Play

05. February, 2025 - 09:08

Kaspersky experts have discovered a new Trojan hidden in apps in the AppStore and Google Play that has been active since at least March 2024.

Complexity of operations

Earth Estries – an analysis of attack techniques

09. December, 2024 - 05:55

Since 2023, Earth Estries has evolved into one of the most aggressive Chinese advanced persistent threat (APT) groups, primarily targeting critical industries such as telecommunications companies and government agencies in the US, Asia-Pacific, the Middle East and South Africa.

Nearest Neighbor Attack

US company hacked by novel Wi-fi attack

29. November, 2024 - 09:11

The Russian hacker group ATP28 has attacked a US company using a new technique called “Nearest Neighbor Attack” and gained remote access to its Wi-Fi network.

Unpatched security vulnerabilities

Cyberattacks on Palo Alto Networks firewall devices

25. November, 2024 - 13:33

Several security breaches were observed at companies from different industries in which firewall devices from Palo Alto Network were involved.

Gigabud and Spynote

Global malware campaign puts smartphones and bank accounts at risk

27. September, 2024 - 06:09

Zimperium has published new findings on a security-critical malware campaign that combines features of two malicious programs. Zimperium researchers’ research shows that both Gigabud and Spynote samples are currently being distributed via domains with similar structures and subdomains.

Automated API abuse by bots

Vulnerable APIs and bot attacks cost companies up to 186 billion US dollars a year

24. September, 2024 - 07:16

Thales publishes the report “Economic Impact of API and Bot Attacks”. Analysis of cybersecurity incidents reveals the rising global cost of insecure APIs and automated bot abuse, two security threats that are increasingly interconnected and widespread.

Guide for more safety

Mastering the IT Bermuda Triangle: cyberattacks, outages, EU regulations

16. September, 2024 - 06:13

CIOs and CISOs are coming under pressure from various directions. Mark Molyneux, EMEA CTO at Cohesity, provides recommendations in a guide on how companies can meet the following challenges.