Daily Cyber Brief
CYBERCOM announces dozens of new forms of malware used against Ukraine, Conti continues to target Costa Rica, and the AIG threat group emerges with a new business plan...

Cybersecurity
American spymasters will be able to yank business away from U.S. companies that purchase or market foreign espionage software, according to a bill passed by the House Intelligence Committee on Wednesday. The bill, which must be approved by the full House and…
General Paul Nakasone, the U.S. Cyber Command head, said the U.S. was conducting “a series of operations” against election meddling. With midterm elections less than four months away, there’s more than a little concern growing about what may come before the first ballot…
Virtual pet website Neopets has suffered a data breach leading to the theft of source code and a database containing the personal information of over 69 million members. Neopets is a popular website where members can own, raise, and play games…
U.S. Cyber Command on Wednesday disclosed dozens of forms of malware that have been used against computer networks in Ukraine, including 20 never-before-seen samples of malicious code. The indicators of compromise were shared with the command’s Cyber…
The 8220 cryptomining group has expanded in size to encompass as many as 30,000 infected hosts, up from 2,000 hosts globally in mid-2021. "8220 Gang is one of the many low-skill crimeware gangs we continually observe infecting cloud hosts and operating a botnet and…
Aamir Lakhani, with FortiGuard Labs, answers the question; Why is the Conti ransomware gang targeting people and businesses in Costa Rica? Any time conflict erupts, people tend to take sides, even when it comes to cybercrime. Since the beginning of the ongoing Russian…
A threat group calling itself the Atlas Intelligence Group (AIG, aka Atlantis Cyber-Army) has recently surfaced with what appears to be a somewhat different — and potentially trend-setting — cybercrime model. Researchers from Cyberint who were the first to spot the group…
A scarily realistic-looking Google Search YouTube advertisement is redirecting visitors to tech support scams pretending to be security alerts from Windows Defender. Today, cybersecurity firm Malwarebytes disclosed that they discovered a "major" malvertising campaign abusing…
Kaspersky security researchers have disclosed details of a brand-new ransomware family written in Rust, making it the third strain after BlackCat and Hive to use the programming language. Luna, as it's called, is "fairly simple" and can run on Windows, Linux, and ESXi…
Cisco has addressed severe vulnerabilities in the Cisco Nexus Dashboard data center management solution that can let remote attackers execute commands and perform actions with root or Administrator privileges. The first security flaw (rated critical severity and…