• About Us
  • Privacy & Policy
  • Terms Conditions
  • Contact Us
biztoplocation.space
  • Home
  • Tech Trends

    The best deals ahead of the October Big Deal Days sale and everything we know so far

    Google Maps will flag businesses with potentially fake reviews

    DoNotPay ‘robot lawyer’ fined $193K by the FTC for not being a lawyer

    Metaโ€™s Orion holographic avatars will (eventually) be in VR too

    Google files EU antitrust complaint against Microsoft

    California’s ‘click to cancel’ subscription bill is signed into law

    Horizon Zero Dawn Remastered arrives October 31 on PS5 and PC

    Ghost of Yลtei is a Tsushima sequel coming to PS5 in 2025

    The Google Photos video editor is getting AI, because of course it is

  • AI News
    The Quantum Arms Race Isnโ€™t Just About Tech, Itโ€™s About Who Controls the Narrative

    “๐ŸŒ€ The Quantum Arms Race: Who Holds the Key to Our Tech Future? ๐ŸŒ๐Ÿ”‘”

    New Survey Finds Balancing AIโ€™s Ease of Use with Trust is Top of Business Leaders Minds

    Navigating the AI Frontier: Balancing Trust and Usability for Business Success ๐Ÿคโœจ

    Benjamin Harvey, Ph.D., Founder & CEO of AI Squared โ€“ Interview Series

    Unlocking the Future of AI: Dr. Benjamin Harveyโ€™s Vision with AI Squared ๐Ÿš€โœจ

    How to Realize Value from a GenAI-Enabled Workforce

    Maximize Your Business Potential: The Game-Changing Power of GenAI ๐Ÿš€โœจ

    How Does AI Use Impact Critical Thinking?

    Navigating the AI Revolution: Boosting Critical Thinking in a Tech-Driven World ๐Ÿค–โœจ

    From Evo 1 to Evo 2: How NVIDIA is Redefining Genomic Research and AI-Driven Biological Innovations

    Unlocking the Secrets of Life: How NVIDIA is Revolutionizing Genomic Research with AI ๐Ÿš€๐ŸŒŸ

    Jotform Review: The Best Form Builder or Just Overhyped?

    Unlocking the Truth: Is Jotform the Next Best Thing in Form Building? ๐Ÿค”๐Ÿš€โœจ

    The Road to Better AI-Based Video Editing

    Unlock Your Creative Potential: Explore the Future of AI in Video Editing! ๐ŸŽฅโœจ๐Ÿš€

    Post-RAG Evolution: AIโ€™s Journey from Information Retrieval to Real-Time Reasoning

    Unlocking AI’s Future: From Data Fetching to Real-Time Thinking ๐Ÿค–โœจ

  • Cyber Security
    Europol Dismantles $540 Million Cryptocurrency Fraud Network, Arrests Five Suspects

    Unmasking the $540 Million Crypto Scam: How Europol Took Down a Fraud Empire ๐Ÿšจ๐Ÿ’ฐ

    Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks

    ๐Ÿšจ Protect Your Code: What You Need to Know About the Open VSX Registry Flaw ๐Ÿ”’โœจ

    nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery

    Navigating the nOAuth Nightmare: Is Your Microsoft Entra App Safe? ๐Ÿšจ๐Ÿ”’

    Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

    ๐Ÿ“‰ Hackers Strike: Unraveling the Shocking 2024 Saudi Games Data Breach ๐ŸŒ๐Ÿ”“

    Beware the Hidden Risk in Your Entra Environment

    Shielding Your Entra: Unmasking Hidden Threats & Securing Your Digital Kingdom! ๐Ÿ›ก๏ธ๐ŸŒโœจ

    Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

    ๐Ÿšจ Don’t Let Hackers Steal Your Secrets: Guard Your Microsoft Exchange Servers Now! ๐Ÿ›ก๏ธ๐Ÿ”‘

    China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom

    Caught in the Crossfire: How Salt Typhoon is Targeting Canadian Telecoms through Cisco Vulnerabilities ๐ŸŒฉ๏ธ๐Ÿ“ž๐Ÿ”’

    Google Adds Multi-Layered Defenses to Secure GenAI from Prompt Injection Attacks

    Secure Your AI Future: How Google is Tackling Prompt Injection Attacks ๐Ÿš€๐Ÿ”’

    200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

    ๐Ÿšจ Warning for Gamers & Developers: Donโ€™t Fall for Trojanized Repositories! ๐Ÿ›ก๏ธ๐Ÿ’ป

  • Apps News
    The Quantum Arms Race Isnโ€™t Just About Tech, Itโ€™s About Who Controls the Narrative

    “๐ŸŒ€ The Quantum Arms Race: Who Holds the Key to Our Tech Future? ๐ŸŒ๐Ÿ”‘”

    New Survey Finds Balancing AIโ€™s Ease of Use with Trust is Top of Business Leaders Minds

    Navigating the AI Frontier: Balancing Trust and Usability for Business Success ๐Ÿคโœจ

    Benjamin Harvey, Ph.D., Founder & CEO of AI Squared โ€“ Interview Series

    Unlocking the Future of AI: Dr. Benjamin Harveyโ€™s Vision with AI Squared ๐Ÿš€โœจ

    How to Realize Value from a GenAI-Enabled Workforce

    Maximize Your Business Potential: The Game-Changing Power of GenAI ๐Ÿš€โœจ

    How Does AI Use Impact Critical Thinking?

    Navigating the AI Revolution: Boosting Critical Thinking in a Tech-Driven World ๐Ÿค–โœจ

    From Evo 1 to Evo 2: How NVIDIA is Redefining Genomic Research and AI-Driven Biological Innovations

    Unlocking the Secrets of Life: How NVIDIA is Revolutionizing Genomic Research with AI ๐Ÿš€๐ŸŒŸ

    Jotform Review: The Best Form Builder or Just Overhyped?

    Unlocking the Truth: Is Jotform the Next Best Thing in Form Building? ๐Ÿค”๐Ÿš€โœจ

    The Road to Better AI-Based Video Editing

    Unlock Your Creative Potential: Explore the Future of AI in Video Editing! ๐ŸŽฅโœจ๐Ÿš€

    Post-RAG Evolution: AIโ€™s Journey from Information Retrieval to Real-Time Reasoning

    Unlocking AI’s Future: From Data Fetching to Real-Time Thinking ๐Ÿค–โœจ

  • Events

    Does Cannabis Belong at Business Events?

    Rising Event Costs to Challenge 2025 Budgets

    Event Tech and the Future of In-Person Networking

    Dubai To Invest $2.7 Billion in What Will Become the Largest Exhibition Venue in the Middle East

    The Old Playbook Will Not Work for Todayโ€™s Corporate Events

    Why Actual Face Time Beats Screen Time for Gen Z

    Breathe New Life Into Meetings in Whistler

    Oak View Group and OCESA Team Up to Offer Hospitality at Four Mexico City Venues

    Time to Chill: Plannersโ€™ Post-Meeting Rituals

No Result
View All Result
  • Home
  • Tech Trends

    The best deals ahead of the October Big Deal Days sale and everything we know so far

    Google Maps will flag businesses with potentially fake reviews

    DoNotPay ‘robot lawyer’ fined $193K by the FTC for not being a lawyer

    Metaโ€™s Orion holographic avatars will (eventually) be in VR too

    Google files EU antitrust complaint against Microsoft

    California’s ‘click to cancel’ subscription bill is signed into law

    Horizon Zero Dawn Remastered arrives October 31 on PS5 and PC

    Ghost of Yลtei is a Tsushima sequel coming to PS5 in 2025

    The Google Photos video editor is getting AI, because of course it is

  • AI News
    The Quantum Arms Race Isnโ€™t Just About Tech, Itโ€™s About Who Controls the Narrative

    “๐ŸŒ€ The Quantum Arms Race: Who Holds the Key to Our Tech Future? ๐ŸŒ๐Ÿ”‘”

    New Survey Finds Balancing AIโ€™s Ease of Use with Trust is Top of Business Leaders Minds

    Navigating the AI Frontier: Balancing Trust and Usability for Business Success ๐Ÿคโœจ

    Benjamin Harvey, Ph.D., Founder & CEO of AI Squared โ€“ Interview Series

    Unlocking the Future of AI: Dr. Benjamin Harveyโ€™s Vision with AI Squared ๐Ÿš€โœจ

    How to Realize Value from a GenAI-Enabled Workforce

    Maximize Your Business Potential: The Game-Changing Power of GenAI ๐Ÿš€โœจ

    How Does AI Use Impact Critical Thinking?

    Navigating the AI Revolution: Boosting Critical Thinking in a Tech-Driven World ๐Ÿค–โœจ

    From Evo 1 to Evo 2: How NVIDIA is Redefining Genomic Research and AI-Driven Biological Innovations

    Unlocking the Secrets of Life: How NVIDIA is Revolutionizing Genomic Research with AI ๐Ÿš€๐ŸŒŸ

    Jotform Review: The Best Form Builder or Just Overhyped?

    Unlocking the Truth: Is Jotform the Next Best Thing in Form Building? ๐Ÿค”๐Ÿš€โœจ

    The Road to Better AI-Based Video Editing

    Unlock Your Creative Potential: Explore the Future of AI in Video Editing! ๐ŸŽฅโœจ๐Ÿš€

    Post-RAG Evolution: AIโ€™s Journey from Information Retrieval to Real-Time Reasoning

    Unlocking AI’s Future: From Data Fetching to Real-Time Thinking ๐Ÿค–โœจ

  • Cyber Security
    Europol Dismantles $540 Million Cryptocurrency Fraud Network, Arrests Five Suspects

    Unmasking the $540 Million Crypto Scam: How Europol Took Down a Fraud Empire ๐Ÿšจ๐Ÿ’ฐ

    Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks

    ๐Ÿšจ Protect Your Code: What You Need to Know About the Open VSX Registry Flaw ๐Ÿ”’โœจ

    nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery

    Navigating the nOAuth Nightmare: Is Your Microsoft Entra App Safe? ๐Ÿšจ๐Ÿ”’

    Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

    ๐Ÿ“‰ Hackers Strike: Unraveling the Shocking 2024 Saudi Games Data Breach ๐ŸŒ๐Ÿ”“

    Beware the Hidden Risk in Your Entra Environment

    Shielding Your Entra: Unmasking Hidden Threats & Securing Your Digital Kingdom! ๐Ÿ›ก๏ธ๐ŸŒโœจ

    Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

    ๐Ÿšจ Don’t Let Hackers Steal Your Secrets: Guard Your Microsoft Exchange Servers Now! ๐Ÿ›ก๏ธ๐Ÿ”‘

    China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom

    Caught in the Crossfire: How Salt Typhoon is Targeting Canadian Telecoms through Cisco Vulnerabilities ๐ŸŒฉ๏ธ๐Ÿ“ž๐Ÿ”’

    Google Adds Multi-Layered Defenses to Secure GenAI from Prompt Injection Attacks

    Secure Your AI Future: How Google is Tackling Prompt Injection Attacks ๐Ÿš€๐Ÿ”’

    200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

    ๐Ÿšจ Warning for Gamers & Developers: Donโ€™t Fall for Trojanized Repositories! ๐Ÿ›ก๏ธ๐Ÿ’ป

  • Apps News
    The Quantum Arms Race Isnโ€™t Just About Tech, Itโ€™s About Who Controls the Narrative

    “๐ŸŒ€ The Quantum Arms Race: Who Holds the Key to Our Tech Future? ๐ŸŒ๐Ÿ”‘”

    New Survey Finds Balancing AIโ€™s Ease of Use with Trust is Top of Business Leaders Minds

    Navigating the AI Frontier: Balancing Trust and Usability for Business Success ๐Ÿคโœจ

    Benjamin Harvey, Ph.D., Founder & CEO of AI Squared โ€“ Interview Series

    Unlocking the Future of AI: Dr. Benjamin Harveyโ€™s Vision with AI Squared ๐Ÿš€โœจ

    How to Realize Value from a GenAI-Enabled Workforce

    Maximize Your Business Potential: The Game-Changing Power of GenAI ๐Ÿš€โœจ

    How Does AI Use Impact Critical Thinking?

    Navigating the AI Revolution: Boosting Critical Thinking in a Tech-Driven World ๐Ÿค–โœจ

    From Evo 1 to Evo 2: How NVIDIA is Redefining Genomic Research and AI-Driven Biological Innovations

    Unlocking the Secrets of Life: How NVIDIA is Revolutionizing Genomic Research with AI ๐Ÿš€๐ŸŒŸ

    Jotform Review: The Best Form Builder or Just Overhyped?

    Unlocking the Truth: Is Jotform the Next Best Thing in Form Building? ๐Ÿค”๐Ÿš€โœจ

    The Road to Better AI-Based Video Editing

    Unlock Your Creative Potential: Explore the Future of AI in Video Editing! ๐ŸŽฅโœจ๐Ÿš€

    Post-RAG Evolution: AIโ€™s Journey from Information Retrieval to Real-Time Reasoning

    Unlocking AI’s Future: From Data Fetching to Real-Time Thinking ๐Ÿค–โœจ

  • Events

    Does Cannabis Belong at Business Events?

    Rising Event Costs to Challenge 2025 Budgets

    Event Tech and the Future of In-Person Networking

    Dubai To Invest $2.7 Billion in What Will Become the Largest Exhibition Venue in the Middle East

    The Old Playbook Will Not Work for Todayโ€™s Corporate Events

    Why Actual Face Time Beats Screen Time for Gen Z

    Breathe New Life Into Meetings in Whistler

    Oak View Group and OCESA Team Up to Offer Hospitality at Four Mexico City Venues

    Time to Chill: Plannersโ€™ Post-Meeting Rituals

No Result
View All Result
biztoplocation.space
No Result
View All Result
Home Security

Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks

admin by admin
September 21, 2024
in Security
0
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

[ad_1]

Destructive Cyber Attacks

A hacktivist group known as Twelve has been observed using an arsenal of publicly available tools to conduct destructive cyber attacks against Russian targets.

“Rather than demand a ransom for decrypting data, Twelve prefers to encrypt victims’ data and then destroy their infrastructure with a wiper to prevent recovery,” Kaspersky said in a Friday analysis.

“The approach is indicative of a desire to cause maximum damage to target organizations without deriving direct financial benefit.”

The hacking group, believed to have been formed in April 2023 following the onset of the Russo-Ukrainian war, has a track record of mounting cyber attacks that aim to cripple victim networks and disrupt business operations.

It has also been observed conducting hack-and-leak operations that exfiltrate sensitive information, which is then shared on its Telegram channel.

Cybersecurity

Kaspersky said Twelve shares infrastructural and tactical overlaps with a ransomware group called DARKSTAR (aka COMET or Shadow), raising the possibility that the two intrusion sets are likely related to one another or part of the same activity cluster.

“At the same time, whereas Twelve’s actions are clearly hacktivist in nature, DARKSTAR sticks to the classic double extortion pattern,” the Russian cybersecurity vendor said. “This variation of objectives within the syndicate underscores the complexity and diversity of modern cyberthreats.”

The attack chains start with gaining initial access by abusing valid local or domain accounts, after which the Remote Desktop Protocol (RDP) is used to facilitate lateral movement. Some of these attacks are also carried out via the victim’s contractors.

“To do this, they gained access to the contractor’s infrastructure and then used its certificate to connect to its customer’s VPN,” Kaspersky noted. “Having obtained access to that, the adversary can connect to the customer’s systems via the Remote Desktop Protocol (RDP) and then penetrate the customer’s infrastructure.”

Prominent among the other tools used by Twelve are Cobalt Strike, Mimikatz, Chisel, BloodHound, PowerView, adPEAS, CrackMapExec, Advanced IP Scanner, and PsExec for credential theft, discovery, network mapping, and privilege escalation. The malicious RDP connections to the system are tunneled through ngrok.

Also deployed are PHP web shells with capabilities to execute arbitrary commands, move files, or send emails. These programs, such as the WSO web shell, are readily available on GitHub.

In one incident investigated by Kaspersky, the threat actors are said to have exploited known security vulnerabilities (e.g., CVE-2021-21972 and CVE-2021-22005) in VMware vCenter to deliver a web shell that then was used to drop a backdoor dubbed FaceFish.

“To gain a foothold in the domain infrastructure, the adversary used PowerShell to add domain users and groups, and to modify ACLs (Access Control Lists) for Active Directory objects,” it said. “To avoid detection, the attackers disguised their malware and tasks under the names of existing products or services.”

Some of the names used include “Update Microsoft,” “Yandex,” “YandexUpdate,” and “intel.exe.”

The attacks are also characterized by the use of a PowerShell script (“Sophos_kill_local.ps1”) to terminate processes related to Sophos security software on the compromised host.

Cybersecurity

The concluding stages entail using the Windows Task Scheduler to launch ransomware and wiper payloads, but not before gathering and exfiltrating sensitive information about their victims via a file-sharing service called DropMeFiles in the form of ZIP archives.

“The attackers used a version of the popular LockBit 3.0 ransomware, compiled from publicly available source code, to encrypt the data,” Kaspersky researchers said. “Before starting work, the ransomware terminates processes that may interfere with the encryption of individual files.”

The wiper, identical to the Shamoon malware, rewrites the master boot record (MBR) on connected drives and overwrites all file contents with randomly generated bytes, effectively preventing system recovery.

“The group sticks to a publicly available and familiar arsenal of malware tools, which suggests it makes none of its own,” Kaspersky noted. “This makes it possible to detect and prevent Twelve’s attacks in due time.”

Found this article interesting? Follow us on Twitter ๏‚™ and LinkedIn to read more exclusive content we post.



[ad_2]

Source link

Previous Post

Navigating Privacy in the AI Era: LinkedIn’s Bold Move to Safeguard Your Data! ๐Ÿ”๐ŸŒโœจ

Next Post

X is reportedly now complying with orders from Brazilโ€™s Supreme Court

admin

admin

Next Post

X is reportedly now complying with orders from Brazilโ€™s Supreme Court

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Stay Connected test

  • 23.9k Followers
  • 99 Subscribers
  • Trending
  • Comments
  • Latest
CERT-UA Warns: Dark Crystal RAT Targets Ukrainian Defense via Malicious Signal Messages

Cybersecurity Under Siege: The Dark Crystal RAT Targets Ukraine’s Defense! ๐Ÿšจ๐Ÿ”’

March 20, 2025
Grab Your Can-Do Attitude and Download Boxville 2

Unleash Your Imagination: Dive into the Whimsical World of Boxville 2! ๐ŸŽฎโœจ๐Ÿงฉ

June 28, 2025
Voyantis Secures $41M to Revolutionize AI-Driven Growth Strategies

Unlocking Growth: How Voyantis’ $41M AI Revolution is Changing the Game for Businesses ๐ŸŒŸ๐Ÿ’ผ

February 14, 2025

A The Lord of the Rings Game is now due out in March 2025

September 23, 2024
Grab Your Can-Do Attitude and Download Boxville 2

Unleash Your Imagination: Dive into the Whimsical World of Boxville 2! ๐ŸŽฎโœจ๐Ÿงฉ

1

Nth Degree Targets Strategic Acquisitions with New Backing from Shamrock Capital

0

5 Best Classic App Store Games

0

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

0
5 Best Classic App Store Games

“โœจ Dive into Nostalgia: 5 Must-Play App Store Classics That Bring Joy! ๐ŸŽ‰”

July 14, 2025
A World of Wonder and Peril Awaits in the Underwater Adventure Subnautica

๐ŸŒŠ Dive Deep into Subnautica: Uncover Secrets Beneath the Waves! ๐Ÿฆ‘โœจ

July 10, 2025
See Your Calendar in a New Way With Timescape

Unlock Your Time Management Potential with Timescape: The Future of Calendars Awaits! ๐Ÿš€๐Ÿ“…โœจ

July 9, 2025
Best New Apps of June 2025

๐Ÿš€ Unleash Your Potential: The Must-Have Apps of June 2025! ๐Ÿ“ฑโœจ

July 7, 2025

Recent News

5 Best Classic App Store Games

“โœจ Dive into Nostalgia: 5 Must-Play App Store Classics That Bring Joy! ๐ŸŽ‰”

July 14, 2025
A World of Wonder and Peril Awaits in the Underwater Adventure Subnautica

๐ŸŒŠ Dive Deep into Subnautica: Uncover Secrets Beneath the Waves! ๐Ÿฆ‘โœจ

July 10, 2025
See Your Calendar in a New Way With Timescape

Unlock Your Time Management Potential with Timescape: The Future of Calendars Awaits! ๐Ÿš€๐Ÿ“…โœจ

July 9, 2025
Best New Apps of June 2025

๐Ÿš€ Unleash Your Potential: The Must-Have Apps of June 2025! ๐Ÿ“ฑโœจ

July 7, 2025

Biz Top News

At Biz Top News, we provide the latest updates and insights on technology, from AI and cybersecurity to apps and cryptocurrency. Stay informed with our expert analysis and breaking news.

Browse by Category

  • AI News
  • Apps
  • Crypto
  • Events
  • Security
  • Tech Trends
  • Uncategorized

About

  • About Us
  • Privacy & Policy
  • Terms Conditions
  • Contact Us

    ยฉ 2025 Biztoplocation - All rights reserved.

    No Result
    View All Result

    ยฉ 2025 Biztoplocation - All rights reserved.