Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. In the attacks observed, the threat actor used these vulnerabilities to access on-premises Exchange servers which enabled access to email accounts and allowed installation of additional malware to facilitate long-term access to victim environments.
A brand new ransomware variant called .hello ransomware or WickrMe Ransomware uses a Microsoft SharePoint 2019 vulnerability (CVE-2019-0604) to enter the victims’ network. From there, the threat actor leverages Cobalt Strike to pivot to the domain controller and launch ransomware attacks.
Ransomware groups are now using DDoS attacks as a negotiation tactic to increase pressure on victims who do not cooperate in paying the ransom. This "Triple Extortion" strategy has recently been used by ransomware operators SunCrypt, RagnarLocker, and Avaddon.
BruCERT was established in May 2004 with the vision of enhancing the security of Brunei ICT through proactive prevention and effective response. BruCERT became the nation’s most trusted one-stop referral agency dealing with computer-related security incidents in Brunei Darussalam.
BruCERT also runs an awareness program called Secure Verify Connect, aimed at raising awareness of Internet safety and information security among the Bruneian public, though education, seminars and workshops.
Please fill in the required fields along with your correct email address so we can reply back to you.
