42
57
42
57
42
42
57
42
42
57
42
42
42
42
42
57
57
57
42
42
42
42
60
42
42
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
Fake software-download sites distribute installers that disable Windows Update and weaken Defender, attributed to China-linked cluster Silver Fox.
Microsoft says an active campaign uses counterfeit vendor websites on .com.cn and .hl.cn infrastructure with Chinese-language lures to deliver server-side generated installers that establish scheduled-task persistence, add Defender exclusions, delete shadow copies, and stop services including wuauserv, UsoSvc, uhssvc and WaaSMedicSvc. Victims span healthcare, manufacturing, gaming, technology, logistics, government and education, primarily China-based operations of multinationals and Chinese-speaking users. Microsoft assesses with moderate confidence the activity matches the Silver Fox (Yinhu) cluster, historically tied to Gh0st RAT and ValleyRAT, with C2 over non-standard ports like 5090 and 7088-7090 via domains iualef[.]net and oijfwe[.]net. Kaspersky separately detailed a QN Wallpaper DLL-sideloading chain delivering ValleyRAT.
68
42
Iranian APTs increased activity against US industries in late spring, researchers say
Nozomi Networks recorded 28 Iran-linked attacks on US customers in May-June, up 133%, mostly hitting transportation and manufacturing.
Nozomi Networks telemetry showed 28 Iran-linked attacks against customers in May and June versus 12 in the prior two months, a 133% increase focused on transportation and manufacturing. MuddyWater was the most active group, targeting at least five US companies, followed by APT33 with at least three; OilRig, CyberAv3ngers, FoxKitten and Homeland Justice were also active. In a separate report, Morphisec said Fox Kitten is recruiting ransomware affiliates with an 80% share of proceeds for attacks against Iran's adversaries, including the US and Israel. The activity comes amid heightened concerns over Iranian cyber retaliation after US strikes on Iranian nuclear facilities.
66
57
42
42
42
42
42
57
42
42
42
60
42