Ransomware

Leidos Holdings, an IT services provider for the U.S. Department of Defense, the Department of Homeland Security, and NASA, has confirmed having internal data stolen from a third-party breach exposed by threat actors but emphasized that neither its network nor customer information was affected.

These new attacks on VMware ESXi are mostly targeting organizations in the manufacturing, professional services and construction sectors.

Hacking group FIN7 has been distributing its new endpoint detection and response evasion tool "AvNeutralizer" across several cybercrime forums to help bolster the stealthiness of ransomware operations.

The profiles were leaked on the Breached hacking forum months after being stolen through an exposed REST API.

The SEXi ransomware operation under the APT INC banner has persistently targeted VMware ESXi servers since last month.

Hundreds of organizations have been compromised in attacks involving the exploitation of legitimate URL protection services for malicious email link concealment as part of a phishing campaign.

This week also features a look at the CDK Software attack that crippled auto dealerships.