InfoSec News Nuggets 03/23/2023

North Korean hackers using Chrome extensions to steal Gmail emails A joint cybersecurity advisory from the German Federal Office for the Protection of the Constitution (BfV) and the National Intelligence Service of the Republic of Korea (NIS) warn about Kimsuky's use of Chrome extensions to steal target's Gmail emails. Kimsuky (aka Thallium, Velvet Chollima) is a North Korean threat group that uses spear phishing to conduct cyber-espionage against diplomats, journalists, government agencies, university professors, and politicians. Initially…
Read More

InfoSec News Nuggets 02/24/2023

HardBit Ransomware Offers to Set Ransom Based on Victim’s Cyberinsurance The HardBit ransomware emerged in October 2022, with version 2.0 launched in late November. In a blog post published on Monday, data security company Varonis reported seeing samples of the malware throughout the rest of 2022 and into 2023.  Organizations hit by the HardBit ransomware have their files encrypted and the cybercriminals also claim to steal victims’ data, although they currently do not appear to have a…
Read More