Daily Cyber Brief
Raspberry Robin worm linked to Evil Corp, 2 are arrested in Spain for allegedly hacking the country's Radioactivity Alert Network, and a huge network of investment sites is uncovered...

Cybersecurity
Sebastian Raoult (Le Français Sébastien Raoult), aka Sezyo, was arrested on June 1st, 2022 from the Rabat international airport and is believed to be one of the alleged members of the infamous ShinyHunters group. A French student has been detained in Morocco on Interpol…
Jacob Wayne John Keen, 24, was arrested for allegedly selling a trojan virus named Imminent Monitor to cyber criminals, domestic violence perpetrators, among others from as many as 128 different countries. The tool allowed users to target unsuspecting victims to steal their…
Researchers have uncovered a gigantic network of more than 11,000 domains used to promote numerous fake investment schemes to users in Europe. The platforms show fabricated evidence of enrichment and falsified celebrity endorsements to create an image of legitimacy…
Humanity’s imagination turned toward the heavens this month as the James Webb Space Telescope revealed images of distant galaxies. But John Crassidis, who worked on initial designs for the telescope at NASA during the 1990s, is focused on something closer to home…
Microsoft on Friday disclosed a potential connection between the Raspberry Robin USB-based worm and an infamous Russian cybercrime group tracked as Evil Corp. The tech giant said it observed the FakeUpdates (aka SocGholish) malware being delivered via existing…
Police in Spain have arrested two people on suspicion of hacking the country’s Radioactivity Alert Network (RAR). The RAR, operated by Spain’s General Directorate of Civil Protection and Emergencies, is a network of gamma radiation sensors. It monitors parts of Spain…
A malicious campaign leveraged seemingly innocuous Android dropper apps on the Google Play Store to compromise users' devices with banking malware. These 17 dropper apps, collectively dubbed DawDropper by Trend Micro, masqueraded as productivity and utility…
A threat actor associated with the LockBit 3.0 ransomware operation is abusing the Windows Defender command line tool to load Cobalt Strike beacons on compromised systems and evade detection by security software. Cobalt Strike is a legitimate penetration testing…
The American Dental Association (ADA) is sending out breach notification letters confirming that it suffered a ransomware attack in April. The professional association for dentists – which has more than 160,000 members – would only say it was facing a cyberattack in…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added the recently disclosed Atlassian security flaw to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE-2022-26138…