The threat actor known as Storm-0501 has targeted government, manufacturing, transportation, and law enforcement sectors in the U.S. to stage ransomware attacks. The multi-stage attack campaign is designed to compromise hybrid cloud environments and perform lateral movement from on-premises to cloud environment, ultimately resulting in data exfiltration, credential theft, tampering, persistent backdoor access, and ransomware deployment, Microsoft said. "Storm-0501 is a financially motivated cybercriminal group that uses commodity and open-source tools to conduct ransomware operations," according to the tech giant's threat intelligence team. Active since 2021, the threat actor has a history of targeting education entities with Sabbath (54bb47h) ransomware before evolving into a ransomware-as-a-service (RaaS) affiliate delivering various ransomware payloads over the years, including Hive, BlackCat (ALPHV), Hunters International, LockBit, and Embargo ransomware.

https://thehackernews.com/2024/09/critical-linux-cups-printing-system.html?m=1

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWrY48IxeKxld-L3SlqQ9ekcj9YLCj9Cx_-HXs4G0hDsG1Eo9sZaw6bp0UVPHLaMz70MwpFhBeRNy3xiKh2a7rXdkNnH5KvzKwSYZgNdG7rrBQ7UVVi3a4Vt1BuWnNQp2aFRx_C-DLkCIW4acB7ClmTskOxNG9a8O6auGDkmALxpnJdnFEX9niWIL96Zff/s728-rw-e365/fbi.png

Cybersecurity researchers have discovered a malicious Android app on the Google Play Store that enabled the threat actors behind it to steal approximately $70,000 in cryptocurrency from victims over a period of nearly five months. The dodgy app, identified by Check Point, masqueraded as the legitimate WalletConnect open-source protocol to trick unsuspecting users into downloading it.