Global Cybersecurity Threats Report: New Malware, Ransomware, and Government Data Breaches as of September 10, 2024

Day

–:–

Post Activated

Scroll down to press Like

As of September 10, 2024, a surge in cyberattacks targeting governments worldwide has highlighted the growing sophistication of ransomware, malware, and data breaches.

Global Ransomware Surge

RansomHub and Akira are two of the most active ransomware groups. RansomHub uses advanced PowerShell scripts and living-off-the-land techniques to evade detection, while Akira employs a hybrid encryption model, targeting governments and critical sectors globally. Akira’s operations include using double-extortion tactics to exfiltrate and encrypt data, pressuring victims to pay ransoms in Bitcoin.
U.S. and U.K. have seen significant rises in ransomware attacks in 2024, with a 63% increase in the U.S. and 67% in the U.K., affecting healthcare, manufacturing, and education sectors the most.

Notable Malware and Cyber Espionage Developments

RAMBO, a newly identified side-channel malware, is designed to target air-gapped systems in high-security government facilities by exploiting electromagnetic radiation from RAM. This sophisticated method has evaded traditional network-based defenses, posing significant risks to government operations.
Cicada3301 ransomware, part of the ransomware-as-a-service model, is now focusing on exploiting VMware ESXi servers, further expanding its reach.

Government Data Breaches

In the U.S., FlightAware, a flight-tracking platform, suffered a breach exposing user IDs, passwords, and email addresses, while the Luxembourg-based Orion Carbon lost $60 million in a business email compromise scam.
RaHDit, a Russian hacktivist group, leaked personal data on 7,700 members of Ukraine’s Azov Battalion, intensifying the ongoing cyber espionage linked to the Russia-Ukraine conflict.

New Cybersecurity Challenges

Governments are increasingly targeted due to their roles in geopolitical conflicts and critical infrastructure. For example, the U.S. has seen a staggering 400,000 cyberattacks in 2024 alone, with significant threats coming from ransomware affiliates exploiting vulnerabilities in government networks.

This trend underscores the urgency for global governments to strengthen their cybersecurity defenses, especially in the face of rapidly evolving tactics from cybercriminals and nation-state actors.