57
Low-quality casino sites conceal highly dangerous threat actors
Infoblox reveals China-aligned APT groups hiding PeckBirdy malware C2 domains inside roughly 1.7 million Chinese-language illegal casino websites.
An Infoblox report says it tracks about 1.7 million Chinese-language casino sites enabling illegal gambling, some of which double as command-and-control infrastructure. China-aligned APT groups have hidden PeckBirdy framework C2 domains inside these low-quality casino sites since 2023, injecting scripts that display fake software update pages to deliver malware. Over 3 percent of Infoblox enterprise customers resolved at least one PeckBirdy C2 domain, and some sites rely on US cloud providers via 'infrastructure laundering.' Infoblox urges defenders not to dismiss casino-domain alerts as mere employee browsing violations.
58
Slovenian casinos reopen after cyberattack knocked gaming systems offline
Slovenian gaming group Hit reopened six casinos after a cyberattack forced closures for roughly three days.
Hit, one of Slovenia's largest gambling and tourism groups, detected a cyberattack early last week that forced six of its casinos to close for about three days. Some gaming functions and the loyalty system remain unavailable, with guests initially limited to slot machines. The company has not disclosed whether data was stolen, how attackers got in, or whether a ransom was demanded; Slovenian police confirmed they are investigating.
55
57
42
57
57
42
57
57
57
57
57
57
42
42
42
42
57
57
57
57
42
57
42
60
57
57
Five alleged members of Scattered Spider cybercrime group charged for breaches, theft of $11 million
57
57
57
57
42
42
47
57
42
57
57
57