Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 12 submissions in the queue.

Submission Preview

Link to Story

Teens with “digital bazookas” are winning the ransomware war, researcher laments

Accepted submission by Freeman at 2023-11-14 16:41:10 from the complaints department 5000 miles -> dept.
News

https://arstechnica.com/security/2023/11/teens-with-digital-bazookas-are-winning-the-ransomware-war-researcher-laments/ [arstechnica.com]

What do Boeing, an Australian shipping company, the world’s largest bank, and one of the world’s biggest law firms have in common? All four have suffered cybersecurity breaches, most likely at the hands of teenage hackers, after failing to patch a critical vulnerability that security experts have warned of for more than a month, according to a post [doublepulsar.com] published Monday.
[...]
All four companies have confirmed succumbing to security incidents in recent days, and China’s ICBC has reportedly [reuters.com] paid an undisclosed ransom in exchange for encryption keys to data that has been unavailable ever since.
[...]
After the CitrixBleed exploit grants initial remote access through software known as Virtual Desktop Infrastructure [vmware.com], LockBit escalates its access to other parts of the compromised network using tools such as Atera [arstechnica.com], which provides interactive PowerShell interfaces that don’t trigger antivirus or endpoint detection alerts. This access remains even after CitrixBleed is patched unless administrators take special actions.


Original Submission