Weekly Intelligence Snapshot – Week 25

Cyber Highlights

DarkRadiation Ransomware Targets Linux Distributions And Docker Containers

Researchers at TrendMicro discovered a new set of tools used to conduct multi-stage kill-chain attacks involving a ransomware variant, dubbed DarkRadiation. The ransomware variant, written in Bash, primarily targets Linux distributions, such as Red Hat, Debian, CentOS, and Docker instances.

Rollups

Industry impacted: Consumer Discretionary, Energy, Financials, Government, Health Care, Information Technology

• Gootloader Malware Campaign Expands to More High-Value Targets
• Ragnar Locker Ransomware Targets Chip Producer ADATA, Leaks Stolen Data
• South Korea’s Nuclear Research Agency Compromised Through a VPN Flaw
• UNC2465: FireEye Uncovers DarkSide Affilate’s Supply Chain Software Compromise

Geopolitical Highlights

Towards an Increasingly Regulated ICT Landscape: Latest Developments and Regulations

Industry impacted: Information Technology Governments are increasing their ICT governance efforts in order to enhance their protection against cyberattacks and to limit the influence of big tech companies. The latest developments, such as new cybersecurity task forces, bills and measures to address ransomware, and bills to enhance the cybersecurity of critical infrastructure, follow a tendency towards a more regulated ICT landscape following a surge in cyberattacks and the increasing importance of tech companies. As such, we expect new regulatory measures in the coming years seeking to regulate the internet, tackle cybercrime, and limit the influence of big tech in order to create a fairer internet.

Rollups

Industry impacted: Government, Information Technology

• German Prosecutors Arrest Russian National on Suspicion of Espionage
• Iranian President-elect Ebrahim Raisi Backs Nuclear Talks, Rules Out Meeting Biden
• Russian Lawmakers Vote to Force US Tech Giants to Open Local Offices