Cybercrime

Users of a specific Mimecast certificate used to authenticate services to Microsoft Office 365 may be at risk of compromise in an attack that may relate to the ongoing SolarWinds incident

https://www.computerweekly.com/news/252494698/Mimecast-latest-security-firm-to-be-compromised

SolarWinds and CrowdStrike published updates Monday that added new information for the timeline of the supply chain attack and how threat actors first gained access.

https://searchsecurity.techtarget.com/news/252494704/SolarWinds-confirms-supply-chain-attack-began-in-2019

Researchers say they have found specific code similarities between the Solorigate/Sunburst malware and the Kazuar backdoor, suggesting some relationship

Customers can expect to see more regular and thorough checks on SolarWinds products, alongside greater engagement with the security community

Coordinated international operation including Europol and the UK’s National Crime Agency has successfully taken DarkMarket offline

Council data stolen in October is leaked online in a double extortion attack

FIFERS are being warned not to fall for an "utterly despicable" fake vaccine text alert.

Here is a list of 10 of the largest cyber attacks of a pandemic-dominated 2020, including several devastating ransomware incidents and a massive supply chain attack.

Ransomware gangs such as Maze have portrayed themselves almost like penetration testing firms and referred to victims as 'clients.' What's behind this approach?

If you come across cybercrime, report it to your national law enforcement authorities!