vparthier

vparthier

Automated attacks: BlackBasta relies on “BRUTED”

Ransomware, blackbasta brute force, brute force angriffe, automatisierte cyberangriffe, BRUTED, BlackBasta

The ransomware group BlackBasta has developed a powerful tool to automate brute force attacks on edge network devices such as firewalls and VPNs. The framework, called "BRUTED", allows attackers to crack targeted credentials and scale ransomware attacks on vulnerable networks.

SuperBlack ransomware exploits Fortinet vulnerability

Fortinet Firewall

In January 2025, Arctic Wolf's threat research team observed suspicious activity on Fortinet FortiGate firewall devices being exploited by the new SuperBlack ransomware. This vulnerability could jeopardize companies that have not yet applied the patch and highlights the growing threat of targeted cyberattacks.

Chinese espionage on old Juniper routers

Router, junos os malware, juniper router malware, Juniper, Malware

Following an intensive investigation dating back to mid-2024, the security company Mandiant has uncovered a covert espionage campaign by the China-linked group UNC3886. Specially developed malware was discovered on decommissioned Junos OS routers from Juniper Networks.

SideWinder now also attacks nuclear power plants

APT, hacker atomkraftwerk, sidewinder hacker, SideWinder, Hacker

The notorious advanced persistent threat (APT) group SideWinder has refined its attack tactics and significantly expanded its geographical reach. According to recent analyses by Kaspersky, the group is now specifically targeting nuclear power plants and energy facilities.

LLMJacking: Cybercriminals hijack DeepSeek

DeepSeek, llmjacking deepseek, LLMJacking, LLM

Since the discovery of LLMJacking by the Sysdig Threat Research Team (TRT) in May 2024, this threat vector has evolved rapidly. Just as large language models (LLMs) are constantly improving and finding new applications, cybercriminals are also adapting and using new ways to gain unauthorized access to these powerful systems.

Ad