Born's Tech and Windows World

[German]The dust is slowly lifting around the successful ransomware attack on the US utility Colonial Pipeline. In the meantime, it has become known that the company probably "wasted" a ransom of 5 million US dollars. There was a decryption key, but importing backups was faster. In addition, an audit revealed serious security flaws in the company's IT. For example, a Microsoft Exchange server had security vulnerabilities. Here is a summary of the latest findings from this case.

Continue reading →

[German]The DarkSide cyber gang, responsible for many ransomware attacks provided "as-a-service" announced it's shutdown after they lost control of it's servers. They claim that their servers where seized and the cryptocurrency was transferred from their account to an unknown wallet. That was claimed in a message posted within he Russian OSINT Telegram channel and also on the cyber gangs web site. Addendum: An analysis showed that the gang collected $17.5 million ransome.

Continue reading →

[German]German BSI and security researchers has issued a warning because a vulnerability called FRAGAttack allows millions of WLAN devices to be attacked locally. The vulnerability affects all WLAN standards (up to WPA3). Fortunately, this vulnerability can only be attacked if the attacker is in the WLAN's reception range. Here is some information about FRAGAttack.

Continue reading →