An Apex Legends event was postponed by organizers after two players appeared to be hacked and given unwanted cheat devices. \u2014 \u00a9 AFP\/File Denis Charlet<\/small><\/em><\/p>\nMicrosoft has warned users of its systems that the Russian APT28 threat group is exploiting a Windows Print Spooler vulnerability to escalate privileges and steal credentials and data using a previously unknown hacking tool called GooseEgg.<\/p>\n
The attackers seek to drop malicious code as a Windows batch script named \u2018execute.bat\u2019 or \u2018doit.bat,\u2019 which launches a GooseEgg executable and gains persistence on the compromised system.<\/p>\n
In recent months, APT28 has been linked to multiple ongoing phishing campaigns that employ lure documents imitating government and non-governmental organizations (NGOs) in Europe, the South Caucasus, Central Asia, and North and South America.<\/p>\n
Looking into this matter for Digital Journal <\/em>is Howard Goodman, Technical Director at Skybox Security.<\/p>\nGoodman begins by providing background context about the warning from the tech giant: \u201cIn its latest security advisory, Microsoft revealed that the Russian threat group APT28, also known as Fancy Bear, has exploited a critical vulnerability in the Windows Print Spooler.\u201d<\/p>\n
With regards to the hacker group, Goodman states: \u201cThis group, notorious for sophisticated cyber-attacks on governmental and non-governmental organizations, as well as critical infrastructure worldwide, has utilized the CVE-2022-38028 vulnerability to escalate privileges and illicitly access sensitive data. This breach highlights the ongoing risk posed by cyber adversaries who exploit common software vulnerabilities to conduct espionage and data theft.\u201d<\/p>\n
In terms of the significance of the alert from Microsoft, Goodman considers: \u201cThis development serves as a crucial reminder of the need for organizations to proactively strengthen their cyber defences.\u201d<\/p>\n
The warning connects with an appropriate strategy to counteract these types of threats. Goodman conceptualises this as: \u201cAn emerging strategy in cybersecurity, Continuous Exposure Management (CEM), offers a comprehensive approach by integrating security policy management, attack surface management, vulnerability management, and remediation automation.\u201d<\/p>\n
Furthermore, the analyst says: \u201cBy continuously assessing, prioritizing, and mitigating threats, CEM enables organizations to effectively respond to vulnerabilities and minimize the risks of data breaches and system compromises.\u201d<\/p>\n
This type of approach adds up to an overall defensive strategy of maintaining vigilance against global security threats. This leads Goodman to comment: \u201cThe sophistication of threat groups like APT28 necessitates that organizations maintain vigilance and adapt their security strategies to effectively counteract evolving cyber threats.\u201d<\/p>\n
Based on this, Goodman concludes: \u201cBy implementing proactive measures such as CEM, organizations can enhance their resilience against sophisticated cyber adversaries and safeguard their critical data and systems.\u201d<\/p>\n<\/p><\/div>\n
New warning over Russian APT28 threat group
\n
#warning #Russian #APT28 #threat #group<\/p>\n","protected":false},"excerpt":{"rendered":"
An Apex Legends event was postponed by organizers after two players appeared to be hacked…<\/p>\n","protected":false},"author":1,"featured_media":8960,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[7],"tags":[4786,1148,2392,2792,555],"yoast_head":"\n
New warning over Russian APT28 threat group - International Pulse<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/internationalpulse.net\/?p=8959\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New warning over Russian APT28 threat group - International Pulse\" \/>\n<meta property=\"og:description\" content=\"An Apex Legends event was postponed by organizers after two players appeared to be hacked...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/internationalpulse.net\/?p=8959\" \/>\n<meta property=\"og:site_name\" content=\"International Pulse\" \/>\n<meta property=\"article:published_time\" content=\"2024-05-12T15:39:00+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/internationalpulse.net\/?p=8959\",\"url\":\"https:\/\/internationalpulse.net\/?p=8959\",\"name\":\"New warning over Russian APT28 threat group - International Pulse\",\"isPartOf\":{\"@id\":\"https:\/\/internationalpulse.net\/#website\"},\"datePublished\":\"2024-05-12T15:39:00+00:00\",\"dateModified\":\"2024-05-12T15:39:00+00:00\",\"author\":{\"@id\":\"https:\/\/internationalpulse.net\/#\/schema\/person\/d507bf8682a9ef7e3ad7a69d9db5e1c3\"},\"breadcrumb\":{\"@id\":\"https:\/\/internationalpulse.net\/?p=8959#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/internationalpulse.net\/?p=8959\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/internationalpulse.net\/?p=8959#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/internationalpulse.net\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New warning over Russian APT28 threat group\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/internationalpulse.net\/#website\",\"url\":\"https:\/\/internationalpulse.net\/\",\"name\":\"International Pulse\",\"description\":\"There's a different sound here\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/internationalpulse.net\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/internationalpulse.net\/#\/schema\/person\/d507bf8682a9ef7e3ad7a69d9db5e1c3\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/internationalpulse.net\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f8e3f392738821708fe4235b6ffa7215?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f8e3f392738821708fe4235b6ffa7215?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/demo6.aiwalls.com\/automatic-news\"],\"url\":\"https:\/\/internationalpulse.net\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New warning over Russian APT28 threat group - International Pulse","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/internationalpulse.net\/?p=8959","og_locale":"en_US","og_type":"article","og_title":"New warning over Russian APT28 threat group - International Pulse","og_description":"An Apex Legends event was postponed by organizers after two players appeared to be hacked...","og_url":"https:\/\/internationalpulse.net\/?p=8959","og_site_name":"International Pulse","article_published_time":"2024-05-12T15:39:00+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/internationalpulse.net\/?p=8959","url":"https:\/\/internationalpulse.net\/?p=8959","name":"New warning over Russian APT28 threat group - International Pulse","isPartOf":{"@id":"https:\/\/internationalpulse.net\/#website"},"datePublished":"2024-05-12T15:39:00+00:00","dateModified":"2024-05-12T15:39:00+00:00","author":{"@id":"https:\/\/internationalpulse.net\/#\/schema\/person\/d507bf8682a9ef7e3ad7a69d9db5e1c3"},"breadcrumb":{"@id":"https:\/\/internationalpulse.net\/?p=8959#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/internationalpulse.net\/?p=8959"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/internationalpulse.net\/?p=8959#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/internationalpulse.net\/"},{"@type":"ListItem","position":2,"name":"New warning over Russian APT28 threat group"}]},{"@type":"WebSite","@id":"https:\/\/internationalpulse.net\/#website","url":"https:\/\/internationalpulse.net\/","name":"International Pulse","description":"There's a different sound here","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/internationalpulse.net\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/internationalpulse.net\/#\/schema\/person\/d507bf8682a9ef7e3ad7a69d9db5e1c3","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/internationalpulse.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f8e3f392738821708fe4235b6ffa7215?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8e3f392738821708fe4235b6ffa7215?s=96&d=mm&r=g","caption":"admin"},"sameAs":["http:\/\/demo6.aiwalls.com\/automatic-news"],"url":"https:\/\/internationalpulse.net\/?author=1"}]}},"featured_image_urls":{"full":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda.jpg",768,512,false],"thumbnail":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda-150x150.jpg",150,150,true],"medium":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda-300x200.jpg",300,200,true],"medium_large":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda.jpg",640,427,false],"large":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda.jpg",640,427,false],"1536x1536":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda.jpg",768,512,false],"2048x2048":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda.jpg",768,512,false],"covernews-slider-full":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda.jpg",768,512,false],"covernews-slider-center":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda-768x500.jpg",768,500,true],"covernews-featured":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda.jpg",768,512,false],"covernews-medium":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda-540x340.jpg",540,340,true],"covernews-medium-square":["https:\/\/internationalpulse.net\/wp-content\/uploads\/2024\/05\/b48c873c8b8b2a16aa59a77573029504f82e0dda-400x250.jpg",400,250,true]},"author_info":{"display_name":"admin","author_link":"https:\/\/internationalpulse.net\/?author=1"},"category_info":"<a href=\"https:\/\/internationalpulse.net\/?cat=7\" rel=\"category\">Stories<\/a>","tag_info":"Stories","comment_count":"0","_links":{"self":[{"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/posts\/8959"}],"collection":[{"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8959"}],"version-history":[{"count":0,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/posts\/8959\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=\/wp\/v2\/media\/8960"}],"wp:attachment":[{"href":"https:\/\/internationalpulse.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8959"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8959"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/internationalpulse.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8959"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}