Cybersecurity Threats

Every month our partner, F-Secure, sends a report on the previous month’s common cybersecurity threats.

Here are some of the highlighted Cybersecurity Threats, or lowlights, for your review:

Major Ransomware Attacks Continue

A major car dealer in the UK, Pendragon, who own about 160 dealerships were hit by LockBit 3.0. It is reported that Pendragon will not pay the ransom even though LockBit 3.0 are threatening to release 2TB worth of the business’ data.

Poland and Ukraine Governments under Siege

A new ransomware variant called “Prestige” hit the transportation departments for Poland and Ukraine, according to Microsoft’s Threat Intelligence Center (MSTIC). MSTIC has not said who is responsible for the attack; however, whoever did it had access to high-level credentials. They note that the victims align with the interests of “Russian-backed” threat groups.

Github a hub for malicious code

In addition, a study by Leiden University in the Netherlands has examined more than 47,000 repositories on GitHub and found that about 10% contain some form of malicious code. Many were benign, but others “were designed to infect the user with RATs, infostealers, crypto-miners and Cobalt Strike.”

Beware Fake LinkedIn Profiles

Bad actors use convincing fake LinkedIn profiles for social engineering campaigns. LinkedIn is attempting to detect the profiles and combat the problem. By adding an “About this Profile” feature, an AI generated profile image detector, and by adding warning’s to certain direct messages.

Review more Cybersecurity Threats by reading the full report. Want help protecting your business against cybersecurity threats, contact us for more information.