Mandiant Unearths New Malware That Can Sabotage Power Grids

New Malware Poses Threat to Industrial Control Systems

A new strain of malware, dubbed COSMICENERGY, has been discovered that is designed to penetrate and disrupt critical systems in industrial environments. The malware is capable of exploiting an industrial communication protocol called IEC-104 to issue commands to RTUs, which could potentially cause power disruption. There is no evidence that the malware has been used in attacks, but its discovery is a reminder of the threat posed by malicious software to critical infrastructure.

COSMICENERGY Malware: What You Need to Know

COSMICENERGY is a new strain of malware that is designed to target industrial control systems (ICS). The malware is capable of exploiting an industrial communication protocol called IEC-104 to issue commands to RTUs, which could potentially cause power disruption. There is no evidence that the malware has been used in attacks, but its discovery is a reminder of the threat posed by malicious software to critical infrastructure.

How to Protect Yourself from COSMICENERGY Malware

There are a number of steps that organizations can take to protect themselves from COSMICENERGY malware and other threats to ICS. These include:

Implementing strong security controls, such as firewalls and intrusion detection systems, to prevent unauthorized access to ICS networks.

Training employees on cybersecurity best practices, such as how to identify and report suspicious emails and attachments.

Keeping ICS software up to date with the latest security patches.

Conducting regular security assessments of ICS networks to identify and fix vulnerabilities.

By taking these steps, organizations can help to protect themselves from the threat of COSMICENERGY malware and other malicious software that could target ICS.

Soldier stealing paperwork from an office

North Korean APT Group Kimsuky Conducts Targeted Social Engineering Campaign

In a recent collaboration with NK News, SentinelLabs, a renowned cybersecurity firm, has uncovered a targeted social engineering campaign orchestrated by the North Korean Advanced Persistent Threat (APT) group known as Kimsuky.

North Korean Threat Actors Target Think Tanks, Academia, and Media with Phishing Campaign

The United States and South Korean governments have issued a joint advisory [PDF] warning that North Korean threat actors are conducting a phishing campaign targeting

Red shield representing security software shattering into pieces.

Malicious Actor Claims New Tool Can Bypass Any Antivirus, EDR

A malicious actor is selling a tool called Terminator that they claim can bypass antivirus and EDR software.

Russia Accuses US of Widespread Apple iPhone Hacking

Russia’s Federal Security Service (FSB) claims to have discovered an elaborate American espionage operation that compromised thousands of iPhones using sophisticated surveillance software. Moscow-based Kaspersky Lab confirmed that several of its employees’ devices were compromised during the operation.