2021-006: ACSC Ransomware Profile - Lockbit 2.0
ACSC has observed an increase in reporting of LockBit 2.0 ransomware incidents in Australia. The LockBit ransomware restricts access to corporate files and systems by encrypting them into a locked and unusable format. Victims receive instructions on how to engage with the offenders after encryption. LockBit affiliates have successfully deployed ransomware on corporate systems in a variety of countries and sectors, including Australia, where the ACSC is aware of numerous incidents since 2020. LockBit affiliates are known to implement the ‘double extortion’ technique by uploading stolen and sensitive victim information to their dark web site ‘LockBit 2.0’, and threatening to sell and/or release this information if their ransom demands are not met.
Cybercriminals targeting construction companies to conduct email scams
Cybercriminals are targeting construction companies to conduct business email compromise scams. All parties to construction projects should be vigilant when emailing about invoices and bank details.
ACSC - Security Update - Chrome Browser
Google released Chrome version 91.0.4472.114 for Windows, Mac, and Linux. The patch notes for this version can be viewed at Chrome Release Note.
ENCRYPTION - What does it Mean
Encryption Whenever you send private data to another computer or server on the internet, which happens many times a day, thereis some risk involved. It's a bit like Little Red Riding Hood's mother sending her to her grandmother's house on the other side of the woods. Those woods, which she has to cross alone without defence, have an assortment of dangers.
Ongoing campaign using Avaddon Ransomware - 2021-003:
The Australian Cyber Security Centre (ACSC) is aware an ongoing ransomware campaign utilising the Avaddon Ransomware malware. This campaign is actively targeting Australian organisations in a variety of sectors. This advisory provides details of Avaddon threat actors, dark web activity, targeted countries and sectors, the malware infection chain, and known Techniques, Tools, and Procedures (TTPs). If activity is identified relating to this advisory please report any findings to the ACSC.
Pradeo and Samsung join forces - protect mobile devices
Pradeo’s Mobile Threat Defense services are now integrated with Knox Manage, Samsung’s mobile device management (MDM) solution available with Knox Suite. Starting today, organizations can simply automate the protection of their mobile fleet, knocking out in a few clicks all the increasing cyberthreats (such as malware or data exfiltration) targeting enterprise mobility.
Government quietly released its new Digital Economy Strategy paper, 2018
Just before Christmas 2018, the Federal Government quietly unveiled its new Digital Economy Strategy - titled Australia's Tech Future (PDF).
Vodafone says Huawei ban significantly undermines Australian 5G future
The Australian government's decision to ban Chinese company, Huawei, from involvement in the 5G rollout is a “significant change which fundamentally undermines Australia’s 5G future”, asserts Vodafone.
Peter Dutton now responsible for cyber security portfolio
Prime Minister, Scott Morrison, has ditched a separate Minister for Cyber Security, instead folding the portfolio into the Home Affairs department under Peter Dutton.
Proposed law will force carriers to give access to smartphone content
Australia's proposed cyber-security legislation, released yesterday, will force carriers and social media giants to provide police with access to content and systems - or face fines up to $10 million.
3 Strategies to Reduce Telecom Cost