A new ransomware operation, known as “Nevada”, has been observed by security researchers that its functionality for the locker targeting Windows and VMware ESXi systems has improved.  On December 10, 2022, Nevada ransomware began to be advertised on the RAMP darknet forums, urging Chinese- and Russian-speaking threat actors to join it in exchange for an continue reading : New Nevada Ransomware Targets Windows and VMware ESXi Systems

_____________________________ A. Nature of the Attack The initial infection starts with a targeted spear-phishing email using a unique phishing email depending on their targeted organization. There are 3 documented methods used after the initial access to the targeted assets. 1). First Method – Threat actors pack all of the described above files, including a malicious continue reading : Dark Pink APT Group Targets Government and Military Organizations in Southeast Asia and Europe

Anchored on the theme “Building Cybersecurity Allies: Lifting Nation’s Cyber Response Capacity and Creating a Digitally Prepared Community, the Philippine National Computer Emergency Response Team (CERT-PH) holds its annual National Cyber Drill (NCD) on November 28 – 29, 2022 as part of its initiative to support the Philippine government’s steadfast cybersecurity efforts and programs for the continue reading : NATIONAL CYBER DRILL 2022

The Philippine National Computer Emergency Response Team (CERT-PH) has successfully conducted its annual CERT-PH Cyber Incident Drill (CCID) anchored on the theme “A Reinforced Cybersecurity: Revamping the Collaborative Competency of Government and Stakeholders in Responding to Threat Incidents” on October 24 – 26, 2022. The three-day activity coincides with the observance of National Cybersecurity Awareness continue reading : CERT-PH Cyber Incident Drill 2022

_____________________________ A. Nature of the Attack In contrast to the purpose of the law, CERT-PH has monitored a phishing campaign taking advantage of it. In the malicious campaign that we observed, threat actors are sending phishing emails to their victims to verify their Virtual Wallet in accordance with Sim Card Registration. A malicious link is continue reading : Beware of Phishing Campaign Taking Advantage of the Sim Registration Act