Security News > 2024 > August > New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data

2024-08-23 10:24
The threat actors behind a recently observed Qilin ransomware attack have stolen credentials stored in Google Chrome browsers on a small set of compromised endpoints. The use of credential harvesting in connection with a ransomware infection marks an unusual twist, and one that could have cascading consequences, cybersecurity firm Sophos said in a Thursday report. The attack, detected in July
News URL
https://thehackernews.com/2024/08/new-qilin-ransomware-attack-uses-vpn.html
Related news
- Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks (source)
- Texas State Bar warns of data breach after INC ransomware claims attack (source)
- Australian pension funds hit by wave of credential stuffing attacks (source)
- Sensata Technologies hit by ransomware attack impacting operations (source)
- Ransomware attack cost IKEA operator in Eastern Europe $23 million (source)
- Kidney dialysis firm DaVita hit by weekend ransomware attack (source)
- CISA tags SonicWall VPN flaw as actively exploited in attacks (source)
- Ahold Delhaize confirms data theft after INC ransomware claims attack (source)
- CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download (source)
- SonicWall SMA VPN devices targeted in attacks since January (source)