US building technology giant Johnson Controls has suffered a ransomware attack, seemingly led by hacking group Dark Angels. The cyberattack has disrupted parts of the company’s internal IT infrastructure. A probe is underway to discover what data may have been compromised. Despite much of the firm’s applications remaining in operation, the cyberattack may force a delay in the release of its Q4 and full-year financial results.

Sandworm Uses SSH-over-Tor Tunnel for Stealthy Long-Term Persistence
A significant evolution in Sandworm (APT-C-13) tradecraft, revealing the group’s use of SSH-over-Tor tunneling to achieve long-term, covert persistence inside targeted networks. Sandworm, also known


