{"id":529,"date":"2022-02-07T12:38:05","date_gmt":"2022-02-07T11:38:05","guid":{"rendered":"http:\/\/scpo-cybersecurityassociation.com\/?p=529"},"modified":"2022-03-07T15:20:32","modified_gmt":"2022-03-07T14:20:32","slug":"cyber-monitoring-3-january-2022","status":"publish","type":"post","link":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/2022\/02\/07\/cyber-monitoring-3-january-2022\/","title":{"rendered":"Cyber Monitoring #3 (January 2022)"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

Cyberattacks in Ukraine:\u00a0<\/strong>In the\u00a0latest round of cyber incidents in Ukraine<\/a>, attackers hijacked many government-run websites and some agencies even lost important data. Microsoft was the first security research team to discover the attack, who dubbed it “WhisperGate.” Security experts and government leaders are\u00a0struggling with how to address these cyber attacks<\/a>. Given the sensitivity around Ukraine and Russia currently, it’s unclear if these could be constituted as an act of war or anything that could lead to kinetic warfare. The U.S. Department of Homeland Security warned Americans that\u00a0Russian state-sponsored actors could launch cyber attacks against critical infrastructure<\/a>\u00a0should the U.S. object to any kinetic warfare in Ukraine. Russian forces are currently gathering near the Ukrainian border, leading to concerns of a military conflict.<\/p>\n\n\n\n

\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n<\/figure>\n\n\n\n
\n\n\n\n

Cyberattacks in Canada:<\/strong> Threat actors targeted Canada’s foreign ministry’s network<\/a>, disrupting some services, though the agency said it did not affect anything critical. The country’s leadership had also just recently warned of potential attacks from Russian state-sponsored actors.<\/p>\n\n\n\n

\n\n\n\n

Arrests of members from the REvil threat group:<\/strong> Russian authorities arrested several alleged members of the REvil ransomware group<\/a> at the request of U.S. authorities. It also seized multiple millions of dollars in international currencies that likely came from cyber attacks.<\/p>\n\n\n\n

\n\n\n\n

A malware that steals and wipes: <\/strong>A well-known banking trojan targeting Android phones recently added a new feature that could completely wipe a target’s phone<\/a>. The malware, Brata, factory resets the phone after it executes an unauthorized wire transaction.<\/p>\n\n\n\n

\n\n\n\n

Some dark web news:<\/strong> UniCC, one of the largest darknet forums for selling stolen credit card information, shut down last week<\/a> when its founder retired. The creator of the forum claims to have made $358 million during the site’s lifespan.<\/p>\n\n\n\n

\n\n\n\n

A huge Internet blackout: <\/strong>The entire country of North Korea lost internet access<\/a> for about six hours this week, possibly due to a distributed denial-of-service attack. This is the second time in as many weeks this happened to the country.<\/p>\n\n\n\n

\n\n\n\n

Threat group officially attributed to Iranian Intelligence: <\/strong>U.S. Cyber Command formally attributed the MuddyWater threat actor<\/a> as an Iranian state-sponsored actor related to the Iranian Ministry of Intelligence (MOIS)<\/a>. The government also released an outline of the group’s tactics, techniques and procedures (TTPs) and likely entry points into victims’ networks.<\/p>\n\n\n\n

\n\n\n\n

A European DNS?<\/strong> The European Union is interested in building its own sovereign and recursive DNS service<\/a> that will be made available to EU institutions and the general public for free. The proposed service, named DNS4EU<\/strong>, is currently in a project planning phase.
But what is a DNS?<\/strong><\/em> On the surface, browsing the web appears to be quite a simple process. Behind the scenes, after you type a URL in your device\u2019s address bar, your device sends a query to a Domain Name Server (DNS) to translate the URL to a machine-readable IP address. Once your device receives the corresponding IP address, it opens the website. The EU said that DNS4EU would come with built-in filtering capabilities that will be able to block DNS name resolutions for bad domains, such as those hosting malware, phishing sites, or other cybersecurity threats.<\/p>\n","protected":false},"excerpt":{"rendered":"

Check out what happened in the cyberspace during the month of January!<\/p>\n","protected":false},"author":7,"featured_media":275,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-529","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"_links":{"self":[{"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/posts\/529","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/comments?post=529"}],"version-history":[{"count":3,"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/posts\/529\/revisions"}],"predecessor-version":[{"id":621,"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/posts\/529\/revisions\/621"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/media\/275"}],"wp:attachment":[{"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/media?parent=529"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/categories?post=529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scpo-cybersecurityassociation.com\/index.php\/wp-json\/wp\/v2\/tags?post=529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}