Two Chinese APT groups coordinated cyberattacks against ASEAN-affiliated entities to coincide with the ASEAN-Australia Special Summit in March 2024, while leaked documents from Chinese contractor iSoon revealed that the Tianfu Cup hacking contest feeds zero-day exploits directly to China’s Ministry of Public Security. Stories Covered Mustang Panda and Earth Krahang Target ASEAN Nations with DLL-Sideloading […]
Blog
No Honor Among Thieves: The Internal Conflict of Black Cat Ransomware | HN 29
Change Healthcare reportedly paid Black Cat (ALPHV) a $22 million ransom in early March 2024 — and the ransomware group promptly exit-scammed its own affiliates, seized the full payment, posted a fake FBI seizure notice, and put its source code up for sale, leaving 4 terabytes of stolen patient and insurance data still in criminal […]
Ransomware Alert: Black Cat’s Bold Move Against UnitedHealth | HN 28
Black Cat (ALPHV) ransomware struck Change Healthcare — the largest prescription payment processor in the US — in late February 2024, disrupting prescription drug access at more than 70,000 pharmacies nationwide and claiming to have stolen 6 terabytes of data including records tied to TRICARE, Medicare, CVS Caremark, and other major insurance and healthcare networks. […]
Massive Ransomware Empire Crumbles: Inside the Fall of LockBit | HN 27
Operation Kronos — a joint operation by the UK National Crime Agency, FBI, Europol, and partners across more than ten countries — dismantled LockBit ransomware’s infrastructure in February 2024, seizing 34 servers and more than 200 cryptocurrency accounts and arresting members in Ukraine and Poland, targeting a group that controlled roughly 25% of the global […]
AI and Cyber Attacks: Unveiling the Tactics of Nation State Hackers | HN 26
Microsoft and OpenAI jointly disclosed that five nation-state APT groups from Russia, China, Iran, and North Korea had been actively using large language models for offensive cyber operations — from scripting and phishing content to satellite protocol research and CVE analysis — before OpenAI shut down all their accounts. Stories Covered Russia, China, Iran, and […]
Hacking Havoc: How Fulton County Became a Real-Life Cyberwar Zone | HN 25
Two stories this episode: a cyberattack on Fulton County, Georgia knocked out power, courts, tax processing, and phone services for the entire county government, while a critical Jenkins vulnerability (CVE-2024-23897) left 45,000 internet-exposed instances open to arbitrary file read and potential remote code execution after proof-of-concept exploit code went public. Stories Covered Cyberattack on Fulton […]