QuoIntelligence’s Weekly Intelligence Snapshot for the week of 30 June – 7 July is now available! Find a summary here and subscribe to our mailing list below if you want to receive regular updates from us!

Cyber Highlights

REvil Ransomware Attack Targets Kaseya Software Manager

Industry impacted: Information Technology

On 2 July, US managed service provider company Kaseya notified customers of ransomware compromises on endpoints managed by the Kaseya VSA on premises product. According to security firm Sophos, the attackers delivered a REvil ransomware variant and demanded an initial payment of almost EUR 40,000 (USD 45,000) in Monero.

APT28: Ongoing Brute Force Global Cyber Campaign, New Technique

Industry impacted: Communication Services, Energy, Government, Industrials

A joint advisory released by multiple government agencies in the US and UK highlights a global brute-force campaign conducted to compromise enterprise and cloud environments. According to the advisory, the agencies attribute the activity to suspected Russia-linked, nation-state cyber espionage threat actor APT28.

Rollups
Industry impacted: Consumer Discretionary, Government

  • Trickbot’s New Developments to Webinject Module
  • Lazarus: Evolving Campaign and TTPs
  • Microsoft Releases an Out-of-Band Patch for Actively Exploited PrintNightmare Vulnerability

Geopolitical Highlights

Governments to Increase Vigilance over Supply Chain Due Diligence Regulation

Industry impacted: Consumer Discretionary, Consumer Staples, Information Technology, Materials

Corporations are increasingly under scrutiny for developing international supply chains that do not respect human rights, the environment, or that are not considered as secure. QuoIntelligence expects that a current investigation in France into the supply chain of international retailers is likely to set a precedent for other industries that outsource part of their business or acquire low cost supplies in China. As such, supply chain regulatory frameworks are likely to become stricter and extend to other regions, such as the rest of Asia, Africa, and Latin America.

Rollups
Industry impacted: Financials, Government, Information Technology

  • Chinese-owned Firm Nexperia Acquired Largest UK Chip Manufacture Newport Wafer Fab
  • US Warns of Action Against Russia-based Ransomware Gangs if Russia Refuses to do So
  • German Political Scientist Arrested on Suspicion of Spying for China
  • Germany Grants Institutional Funds the Ability to Invest in Crypto
  • EU Starts Work on Rival to China’s Belt and Road Initiative

Outlook

Industry impacted: Information Technology

15 July – ENISA Workshop: Remote Identity Proofing, Attacks & Countermeasures