An updated version of the EagerBee backdoor malware is being used against ISPs and government entities in the Middle East, according to Kaspersky researchers. The new variant, which was previously deployed against Southeast Asian organizations, adds several advanced features to improve its stealth and evasion capabilities. Kaspersky attributes the malware to Chinese threat group CoughingDown, which has previously collaborated with other state-backed Chinese groups. EagerBee is designed to seamlessly integrate with normal system operations, making it difficult to identify and analyze.
Massachusetts health firm reaches $80,000 settlement with HHS following ransomware investigation
The U.S. Department of Health and Human Services (HHS) has fined Elgon Information Systems $80,000 following a ransomware attack in 2023 that saw over 31,000