Security News > 2019 > September > Supply Chain Attacks: Hackers Hit IT Providers

2019-09-19 11:03
Symantec Sees New Tortoiseshell Gang Hitting Targets in Middle EastA hacked group called Tortoiseshell has been hitting targets in the Middle East since at least July 2018, apparently targeting IT service providers to gain access to many potential targets at once. The campaign is fresh proof that criminals and nation-state attackers alike continue to favor supply chain attacks.
News URL
https://www.inforisktoday.com/supply-chain-attacks-hackers-hit-providers-a-13122
Related news
- North Korean hackers adopt ClickFix attacks to target crypto firms (source)
- Recent GitHub supply chain attack traced to leaked SpotBugs token (source)
- SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack (source)
- That massive GitHub supply chain attack? It all started with a stolen SpotBugs token (source)
- Russian hackers attack Western military mission using malicious drive (source)
- Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery (source)
- Hackers abuse Zoom remote control feature for crypto-theft attacks (source)
- Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack (source)
- DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack (source)
- Ripple NPM supply chain attack hunts for private keys (source)