| OpenText Cybersecurity Community

Skip to main content

Customer Support Customer Support

Events
Leaderboard
Customer Support

Create topic
Login

Data Protection

Endpoint Backup

Migrate

Information Archiving

Server Backup

Availability

Cloud-to-Cloud Backup

Latest Articles

News

Cyber News Rundown: Crocodilus Android malware targets cryptocurrency wallets

10 days ago

264

Blog

Fast Flux: The Evasive DNS Tactic Now Considered a National Security Threat

10 days ago

1705

updates

What’s New at OpenText Cybersecurity: April 2025

12 days ago

735

Malware Distributors Leverage Social Security Concerns Amid DOGE Action

14 days ago

403

Tabs

Recently active

TripleHelixModerator

posted in Water Cooler

Goodnight Thread - 2

The old thread (10 years) has run it’s course as you can’t post in there anymore so I started a new one! Thanks @Ssherjj

Jasper_The_RasperModerator

posted in Security Industry News

Govtech giant Conduent confirms client data stolen in January cyberattack

April 14, 2025 By Lawrence Abrams American business services giant and government contractor Conduent disclosed today that client data was stolen in a January 2025 cyberattack. Conduent is a business services company that provides digital platforms and solutions for government and commercial clients in transportation, healthcare, customer experience, and human resources. The company has over 33,000 employees and provides services to half of Fortune 100 companies and over 600 government and transportation agencies. In January, the company suffered a cyberattack that impacted customers' operations across the U.S., including local government agencies. In a new FORM-8K filing with the SEC today, Conduent has now confirmed that threat actors had stolen files containing information about the company's customers. >>Full Article<<

Jasper_The_RasperModerator

posted in Security Industry News

UnitedHealth is now asking doctors to repay the loans it gave out following major hack

UnitedHealth is now “aggressively” chasing borrowers April 14, 2025 By Ellen Jennings-Trace (Image credit: Rawpixel / Pixabay) Change Healthcare suffered a huge cyberattack in 2024 Disruptions from that attack cost organizations millions The firm is now chasing repayment of loans to cover losses from these disruptions UnitedHealth Group is “aggressively” going after small healthcare organizations that borrowed money following a huge cyberattack on its subsidy Change Healthcare. The attack is said to have affected almost 190 million Americans, and was the largest US healthcare data breach ever, and was incredibly disruptive, with systems only fully restored 9 months later, costing over $2 billion to recover from. After the attack, interest-free loans were offered by Change to help medical practices with short-term cash flow needs. The firm is now demanding these funds be “immediately” repaid, with some organizations asked to repay hundreds of thousands of dollars in just a few days. >>F

Jasper_The_RasperModerator

posted in Security Industry News

Chinese APTs Exploit EDR 'Visibility Gap' for Cyber Espionage

Blind spots in network visibility, including in firewalls, IoT devices, and the cloud, are being exploited by Chinese state-backed threat actors with increasing success, according to new threat intelligence. Here's how experts say you can get eyes on it all. April 14, 2025 By Becky Bracken Beijing-backed hacker groups are known by a variety of benign-sounding monikers, like FishMonger and MirrorFace, and notably, Volt Typhoon and Salt Typhoon — but a handful of these groups, some of them operating as arms of the military, are running ruthless cyber-espionage campaigns against the US's most sensitive critical infrastructure, including utilities and telecommunications networks. While these groups' attribution to China by the US government and cybersecurity researchers hasn't really been in question, China itself isn't even trying to hide the nefarious cyber activity anymore. According to an April 10 Wall Street Journal report about a meeting with US representatives last December, Chinese

Jasper_The_RasperModerator

posted in Security Industry News

Slow Pisces Hackers Attacking Developers With Coding Challenges & Python Malware

April 14, 2025 By Tushar Subhra Dutta A sophisticated threat actor group dubbed “Slow Pisces” has emerged as a significant threat to software developers, employing deceptive coding challenges as an initial attack vector to distribute Python-based malware. The campaign specifically targets developers through professional networking sites, coding forums, and development platforms with seemingly innocuous programming puzzles that conceal malicious payloads. Security researchers have observed these attacks increasing in frequency since January 2025, with victims primarily located in technology hubs across North America and Europe. >>Full Article<<

Jasper_The_RasperModerator

posted in Security Industry News

Tycoon2FA phishing kit rolled out significant updates

April 14, 2025 By Pierluigi Paganini The operators of the Phishing-as-a-Service (PhaaS) platform Tycoon2FA have rolled out significant updates to enhance its evasion capabilities. Tycoon2FA, a phishing kit discovered in 2023 by cybersecurity firm Sekoia, was recently updated to improve its evasion capabilities. The phishing kit now uses advanced evasion tactics such as a custom CAPTCHA via HTML5 canvas, invisible Unicode in obfuscated JavaScript, and anti-debugging scripts to bypass detection and hinder analysis. “Lately, the Tycoon 2FA landing pages have incorporated a clever obfuscation technique using invisible Unicode characters. This technique, when paired with JavaScript Proxy objects, is designed to complicate static analysis and defer script execution until runtime.” reported Trustwave. “This behavior is demonstrated in a real-world Tycoon 2FA phishing landing page, as shown in this Urlscan.io session: https://urlscan.io/result/0195c73f-bfd0-7000-8386-94b11ace6088/dom/“ Source:

Jasper_The_RasperModerator

posted in Ransomware Spotlight

Kidney dialysis firm DaVita hit by weekend ransomware attack

April 14, 2025 By Bill Toulas Kidney dialysis firm DaVita disclosed Monday it suffered a weekend ransomware attack that encrypted parts of its network and impacted some of its operations. DaVita is a major provider of kidney care services in the United States, operating over 2,600 outpatient treatment centers that provide dialysis to those suffering from kidney disease. It is a Fortune 500 organization with 76,000 employees in 12 countries and an annual revenue that surpasses $12.8 billion. The company disclosed today in an SEC FORM-8K filing that it suffered a ransomware attack on Saturday that encrypted some of the systems on its network. It is common for ransomware gangs to deploy encryptors over the weekend when IT teams are understaffed and less likely to respond quickly. "On April 12, 2025, DaVita Inc. became aware of a ransomware incident that has encrypted certain elements of our network," reads the 8-K filing. >>Full Article<<

Jasper_The_RasperModerator

posted in Security Industry News

Possible Russian Hackers Targeted UK Ministry of Defense

Spear-Phishing Campaign Used RomCom Malware Variant April 14, 2025 By Akshaya Asokan Image: Shutterstock A phishing campaign wielding malware previously associated with Russian-speaking hackers targeted the U.K. Ministry of Defense in late 2024, the British government said Friday. Hackers spear-phished civil servants with emails purporting to originate from a news organization, later also deploying financially themed bait that directed users to a commercial file sharing site. The ministry and the National Cyber Security Centre disclosed the campaign on Friday. Anyone who clicked on the links in the phishing emails ultimately ended up with a malicious downloader known as Damascened Peacock on their computer, they said. >>Full Article<<

Jasper_The_RasperModerator

posted in Security Industry News

New malware ‘ResolverRAT’ targets healthcare, pharmaceutical firms

April 14, 2025 By Pierluigi Paganini New malware ‘ResolverRAT’ is targeting healthcare and pharmaceutical firms, using advanced capabilities to steal sensitive data. Morphisec researchers discovered a new malware dubbed ‘ResolverRAT’ that is targeting healthcare and pharmaceutical firms, using advanced capabilities to steal sensitive data. ResolverRAT spreads via phishing emails using localized languages and legal lures. Victims download a malicious file triggering the malware. The multi-language tactic suggests a global, targeted campaign aimed at boosting infection success across regions. >>Full Article<<

Jasper_The_RasperModerator

posted in Security Industry News

Cybersecurity firm buying hacker forum accounts to spy on cybercriminals

April 14, 2025 By Bill Toulas Swiss cybersecurity firm Prodaft has launched a new initiative called 'Sell your Source' where the company purchases verified and aged accounts on hacking forums to to spy on cybercriminals. The goal is to use these accounts to infiltrate cybercrime spaces and communities, collecting valuable intelligence that could lead to the exposure of malicious operations and platforms. "As a threat intelligence company, we specialize in obtaining visibility into the infrastructures of cybercriminals, searching for patterns, tactics, techniques, and procedures that help us understand adversarial networks and detect and mitigate potential cyberattacks," explains Prodaft. "As these activities are routinely associated with places such as the deep and dark web, underground forums, or illicit marketplaces, we want to ensure our coverage does not hit any limitations." >>Full Article<<

Events calendar

2025 OpenText Cybersecurity Threat Report - understanding the cyber threats facing SMB’s

2025 OpenText Cybersecurity Threat Report - understanding the cyber threats facing SMB’s

Leaderboard

1

Jasper_The_Rasper

171 points

171 points

2

76 points

76 points

3

48 points

48 points

4

39 points

39 points

5

4 points

4 points

1

Jasper_The_Rasper

197929 points

197929 points

2

142144 points

142144 points

3

69330 points

69330 points

4

32955 points

32955 points

5

25206 points

25206 points

Join the Conversation

Tweets by OpenTextSec

Powered by Gainsight

Terms & Conditions

Cybersecurity Solutions OpenText Cybersecurity 2024 Threat Report Cyber Resilience Program

Privacy Policy Cookie Policy Cookies Preferences

LinkedIn Twitter YouTube

© 2024 Open Text Corporation. All rights reserved.

Sign up

Already have an account? Login

Username *

E-mail address *

Password *

I accept the terms & conditions

loginBox.register.email_repeat

Login to the community

No account yet? Create an account

Username or Email

Password

Remember me

Forgot password?

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK