Cybercrime

New intelligence from UK and US cyber agencies suggests that APT29, or Cozy Bear, has been switching up its tactics

https://www.computerweekly.com/news/252500409/NCSC-CISA-publish-new-information-on-Russias-Cozy-Bear

Security experts at Black Hat Asia 2021 discuss the state of ransomware and supply chain attacks, two of the most common attack vectors that offer high returns for threat actors

https://www.computerweekly.com/news/252500389/Ransomware-supply-chain-attacks-show-no-sign-of-abating

A recent incident at an undisclosed customer sheds new light on how malicious actors exploit unpatched Microsoft Exchange servers

https://www.computerweekly.com/news/252500236/Sophos-How-timely-intervention-stopped-a-ProxyLogon-attack

Compromise of Merseyrail employee data seems to have begun after a key email account was hacked

Office 365 compromise likely led to Merseyrail ransomware attack (computerweekly.com)

We give a broad overview and insight into the discussions held at our quarterly Cyber Coordination Group meetings, with the aim of sharing the valuable insights found in these groups to the wider financial sector.

https://www.fca.org.uk/publications/research/insights-cyber-coordination-groups-2020

Sophos’ latest study finds that ransomware attacks are proving increasingly disruptive to their victims’ finances

https://www.computerweekly.com/news/252499796/Total-cost-of-ransomware-attack-heading-towards-2m

The Telegram instant messaging service is being used by malicious actors to manage a remote access trojan called ToxicEye

ToxicEye malware exploits Telegram messaging service (computerweekly.com)

The UK’s National Cyber Security Centre (NCSC) has released a free cyber security training package for teachers and other school staff, setting out steps to take to help mitigate cyber attacks and drawing on real-life case studies to demonstrate the impact of such incidents.

NCSC offers teachers free cyber security training (computerweekly.com)

The research shows that 68% of cyber crimes happened after the victim responded to fraudulent emails, texts and phone calls, resulting in them transferring money to the fraudster.

Cyber crime up 6%: Watch out for emails, texts, phone calls (electronicsweekly.com)

Technology companies continue to be frequently spoofed by cyber criminals in their phishing attempts

Microsoft is most impersonated brand in phishing attempts (computerweekly.com)