{"id":40919,"date":"2021-10-07T15:47:54","date_gmt":"2021-10-07T22:47:54","guid":{"rendered":"https:\/\/lapost.us\/?p=40919"},"modified":"2021-10-07T15:47:54","modified_gmt":"2021-10-07T22:47:54","slug":"russia-has-indeed-been-sketchy-online-this-year","status":"publish","type":"post","link":"https:\/\/lapost.us\/?p=40919","title":{"rendered":"Russia has indeed been sketchy online this year"},"content":{"rendered":"<p dir=\"ltr\">Cyberattacks originating in Russia accounted for more than half of intrusions tracked by Microsoft since mid-2020, the company said in a report released Thursday.<\/p>\n<p dir=\"ltr\"><strong>New report:<\/strong>\u00a0The findings were detailed in Microsoft\u2019s\u00a0<a href=\"https:\/\/click1.email.thehill.com\/mybsmzwgpccljzjcltnpplsspwlvcwckkdpgzbvcywbycc_orltwwjzjdtljjlklfwl.html?a=&amp;b=43089\" target=\"_blank\" rel=\"noopener noreferrer\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/click1.email.thehill.com\/mybsmzwgpccljzjcltnpplsspwlvcwckkdpgzbvcywbycc_orltwwjzjdtljjlklfwl.html?a%3D%26b%3D43089&amp;source=gmail&amp;ust=1633733034494000&amp;usg=AFQjCNEHuLT2d_WBK1tdetwIQzA-HcZpVw\">annual Digital Defense Report<\/a>. The company said it tracked threat activity from a number of countries, but found that 58 percent of attacks reported by customers originated in Russia, followed by North Korea at 23 percent.<\/p>\n<p dir=\"ltr\">\u201cOver the past year, Russia-based activity groups have solidified their position as acute threats to the global digital ecosystem,\u201d the report states. \u201cThey have also shown a high tolerance for collateral damage, which leaves anyone with connections to targets of interest vulnerable to opportunistic targeting.\u201d<\/p>\n<p dir=\"ltr\">The report went on to say that more than 90 percent of the Russian-linked threat activity was carried out by a threat group Microsoft named \u201cNobelium,\u201d which the company\u00a0<a href=\"https:\/\/click1.email.thehill.com\/ggtnsjwqmccdfjfcdkrmmdnnmwdpcwchhtmqjlpcgwlgcy_orltwwjzjdtljjlklfwl.html?a=&amp;b=43089\" target=\"_blank\" rel=\"noopener noreferrer\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/click1.email.thehill.com\/ggtnsjwqmccdfjfcdkrmmdnnmwdpcwchhtmqjlpcgwlgcy_orltwwjzjdtljjlklfwl.html?a%3D%26b%3D43089&amp;source=gmail&amp;ust=1633733034494000&amp;usg=AFQjCNG8vqgj5fadisndMyRuo-dhWoPYIw\">blamed in May<\/a>\u00a0for using a U.S. Agency for International Development email marketing account to target hundreds of organizations in two dozen countries, including government agencies.<\/p>\n<p dir=\"ltr\"><strong>U.S. hit hard:<\/strong>\u00a0Microsoft found that the U.S. was the most targeted nation by far, accounting for almost half of attacks between July 2020 and June 2021. By contrast, Ukraine was the second most targeted country, with 19 percent of threat activity aimed within its borders.<\/p>\n<p dir=\"ltr\"><a href=\"https:\/\/click1.email.thehill.com\/svmlwzjfpbbtgzgbtcmpptllpjthbjbddkpfzshbvjsvbv_orltwwjzjdtljjlklfwl.html?a=&amp;b=43089\" target=\"_blank\" rel=\"noopener noreferrer\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/click1.email.thehill.com\/svmlwzjfpbbtgzgbtcmpptllpjthbjbddkpfzshbvjsvbv_orltwwjzjdtljjlklfwl.html?a%3D%26b%3D43089&amp;source=gmail&amp;ust=1633733034494000&amp;usg=AFQjCNGCTLNuORpBzYIXUFSWIhcJrOdKIg\">Read more about the findings here<\/a>.<\/p>\n<p dir=\"ltr\">Illustrating the continuing cyber threats linked to Russia, cybersecurity group Mandiant released research Thursday finding that a Russian-speaking cyber criminal group is disproportionately using ransomware attacks to target hospitals and health care groups across North America as the COVID-19 pandemic continues.<\/p>\n<p dir=\"ltr\">Mandiant labeled the group \u201cFIN12,\u201d noting that it has been in existence since at least 2018, but was increasingly hitting organizations in North America with annual revenues of more than $300 million with ransomware attacks.<\/p>\n<p dir=\"ltr\">According to Mandiant, one in five of FIN12\u2019s victims were health care groups, many of which operate hospitals, while other victims have included groups in business services, education, finance, government, manufacturing, retail and technology.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cyberattacks originating in Russia accounted for&#46;&#46;&#46;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,5],"tags":[],"class_list":["post-40919","post","type-post","status-publish","format-standard","hentry","category-u-s-a","category-world"],"_links":{"self":[{"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/posts\/40919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lapost.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=40919"}],"version-history":[{"count":1,"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/posts\/40919\/revisions"}],"predecessor-version":[{"id":40920,"href":"https:\/\/lapost.us\/index.php?rest_route=\/wp\/v2\/posts\/40919\/revisions\/40920"}],"wp:attachment":[{"href":"https:\/\/lapost.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=40919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lapost.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=40919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lapost.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=40919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}