Dark Reading Daily -- July 22, 2022

Mysterious, Cloud-Enabled macOS Spyware Blows Onto the Scene

The CloudMensis spyware, which can lift reams of sensitive information from Apple machines, is the first Mac malware observed to exclusively rely on cloud storage for C2 activities.

The Market Is Teeming: Bargains on Dark Web Give Novice Cybercriminals a Quick Start

A study of the unregulated dark markets shows that the vast majority of malware, exploits, and attacker tools sell for less than $10, giving would-be criminals a fast entry point.

Cybercrime Group TA4563 Targets DeFi Market With Evolving Evilnum Backdoor

The cyber campaign, aimed at siphoning funds, uses an improved version of the malware, which can adjust infection paths based on recognized antivirus software.

The Kronos Ransomware Attack: What You Need to Know So Your Business Isn't Next

Identify your business's security posture and head off ransomware attacks with third-party risk management and vendor security assessments.

Google Becomes First Cloud Operator to Join Healthcare ISAC

Google Cloud pledges experts and other resources to Health Information Sharing and Analysis Center, a community of healthcare infrastructure operators and owners.

Unpatched GPS Tracker Security Bugs Threaten 1.5M Vehicles With Disruption

A GPS device from MiCODUS has six security bugs that could allow attackers to monitor 1.5 million vehicles that use the tracker, or even remotely disable vehicles.

Post-Breakup, Conti Ransomware Members Remain Dangerous

The gang's members have moved into different criminal activities, and could regroup once law-enforcement attention has simmered down a bit, researchers say.

How to Mitigate the Risk of Karakurt Data Extortion Group's Tactics, Techniques, and Procedures

The group has become the new face of ransomware, taking advantage of vulnerabilities and poor encryption.

'AIG' Threat Group Launches With Unique Business Model

The rapidly growing Atlas Intelligence Group relies on cyber-mercenaries to carry out its missions.

LATEST FROM THE EDGE

Equitable Digital Identity Verification Requires Moving Past Flawed Legacy Systems

Data science can be used to improve access to government assistance while reducing fraud.

LATEST FROM DR TECHNOLOGY

Startup Aims to Secure AI, Machine Learning Development

With security experts warning against attacks on machine learning models and data, startup HiddenLayer aims to protect the neural networks powering AI-augmented products.

Implementing Zero Trust In Your Enterprise: How to Get Started