IT Information Security

Pierluigi Paganini June 20, 2020
U.S. authorities sanction six Nigerian nationals for BEC and Romance Fraud

US authorities this week announced sanctions against six Nigerian nationals for their involvement in business email compromise (BEC) and romance fraud schemes. The United States Department of the Treasury’s Office of Foreign Assets Control (OFAC) and the Department of Justice announced sanctions against six Nigerians for their involvement in business email compromise (BEC) and romance […]

Pierluigi Paganini June 19, 2020
An SSRF flaw in Maximo Asset Management could be used to target corporate networks

IBM recently fixed a high-severity issue in its Maximo asset management solution that could facilitate attacks on corporate networks. IBM recently addressed a high-severity issue, tracked as CVE-2020-4529, in its Maximo asset management solution that could facilitate attacks on making lateral movements within corporate networks. Maximo is designed to assist an organisation in managing its assets […]

Pierluigi Paganini June 19, 2020
AcidBox, a malware that borrows Turla APT exploit, hit Russian organizations

New AcidBox Malware employed in targeted attacks leverages an exploit previously associated with the Russian-linked Turla APT group. Palo Alto Networks researchers analyzed a new malware, dubbed AcidBox, that was employed in targeted attacks and that leverages an exploit previously associated with the Russian-linked Turla APT group. The Turla APT group (aka Snake, Uroburos, Waterbug, Venomous Bear and KRYPTON) has been active since at […]