Prezzo di CyberCYBER

Silent Push researchers claim cyber spies from North Korea’s Lazarus Group, have set up U.S. shell companies under fake aliases to infect crypto developers with malware. According to a recent Reuters report , U.S. cybersecurity company Silent Push has identified two shell companies that can be traced back to the North Korean hacker group. Researchers claimed that the two companies, Blocknovas LLC and Softglide LLC, were set up in New Mexico and New York respectively under fake personas and addresses. Upon further inspection, Reuters found that the address listed for Blocknovas in Warrenville, South Carolina appeared as an empty lot on Google Maps. Meanwhile, Softglide’s address in Buffalo, New York was occupied by a small tax office. Moreover, the contact persons listed under the companies could not be found. Director of threat intelligence at Silent Push, Kasey Best called it a “rare example of North Korean hackers actually managing to set up legal corporate entities in the U.S.” He explained how the Lazarus Group hackers would seek to infect users through fake job applications with at least three strains of detected malware linked to North Korean cyber operations. The malicious cyber attacks would use fake aliases to offer job interviews for prospective crypto or web3 developers, which would enable the hackers to deploy sophisticated malware designed to compromise the cryptocurrency wallets of developers. “They also target the developers’ passwords and credentials which could be used to further attacks on legitimate businesses,” said Best. The hackers behind these firms are allegedly part of a subgroup within the Lazarus Group, which is part of the Reconnaissance General Bureau, Pyongyang’s main foreign intelligence agency. Lazarus Group is known for being the actors behind some of the largest crypto hacks in history, including the most recent Bybit hack which resulted in losses of up to $1.5 billion. When asked about these shell companies and their possible ties to the North Korean hacker group, the New York Department of State declined to comment on companies registered in the state. Meanwhile, the New Mexico secretary of state’s office told Reuters in an email that it has no way of knowing about the firm’s connection to North Korea. On April 24, the FBI posted a domain seizure notice on the Blocknovas website, starting that “as part of a law enforcement action against North Korean Cyber Actors who utilized this domain to deceive individuals with fake job postings and distribute malware.”

Analyzing the risks and challenges associated with $EPT $EPT requires understanding the specific context, which could refer to various assets or projects. Given the potential ambiguity, let's break down common risks and challenges applicable to different domains: Common Risks and Challenges - *Operational Risks*: Disruptions in clinical workflows, loss of productivity, and technical issues with system upgrades or maintenance. - *Financial Risks*: High costs for implementation, maintenance, and training, potentially leading to decreased revenue or increased expenses. - *Security Risks*: Data breaches, unauthorized access, and cyber threats, particularly in IoT or EHR systems. - *Regulatory Risks*: Non-compliance with regulations, such as HIPAA, or federal mandates for electronic health records. - *Human Resource Challenges*: Insufficient training, lack of IT staff, and managing change effectively within an organization ¹ ². Specific Considerations - *Lack of Executive Sponsorship*: Without strong leadership support, projects may struggle with adoption and alignment. - *Inadequate Change Management*: Failing to manage transition effectively can lead to breakdowns and user frustration. - *Undefined Business Needs*: Clearly defining project goals and needs is crucial for success. - *Supply Chain Risks*: Compromises during manufacturing or distribution can introduce vulnerabilities. Mitigation Strategies - *Comprehensive Training*: Providing thorough training for users to ensure smooth adoption. - *Risk Assessment*: Conducting thorough risk assessments to identify potential issues. - *Strong Leadership*: Securing executive sponsorship and leadership support for project success. - *Secure Supply Chain*: Establishing transparent and secure supply chain practices to minimize risks ³ ².$EPT

North Korean hackers Lazarus Group uses US shell companies to recruit crypto developers According to a research report by Silent Push, a sub-team of the North Korean cyber espionage Lazarus Group registered two companies, Blocknovas LLC and Softglide LLC, under false identities in New Mexico and New York, USA, and tricked cryptocurrency developers into downloading malware by posting fake job invitations, thereby stealing wallet credentials and implanting tools needed for subsequent attacks. The FBI has seized the Blocknovas domain name, saying it was used to post fake recruitment information and distribute malware. Kasey Best, director of intelligence at Silent Push, said that such attacks not only target developer wallets, but can also use stolen credentials to further infiltrate legitimate corporate networks. The report pointed out that this method of establishing an entity in the United States to circumvent sanctions violates the sanctions imposed by the US Treasury Department and the United Nations on North Korea. (Reuters)

The US Securities and Exchange Commission (SEC) charged Ramil Palafox, the founder of the crypto company PGI Global, with orchestrating a massive $198 million Ponzi scheme that misled investors worldwide. Palafox is accused of defrauding investors by promoting PGI Global as a legitimate crypto asset and foreign exchange trading business from January 2020 through October 2021. The SEC’s complaint detailed that Palafox sold “membership” packages that promised high returns from PGI Global’s supposed trading operations, while also offering multi-level marketing-style referral incentives to encourage new investors. In reality, Palafox misappropriated over $57 million of the investor funds for personal expenses, including luxury items such as Lamborghinis. The majority of the remaining funds were used to pay returns to earlier investors in a classic Ponzi scheme until it collapsed in late 2021. Scott Thompson, Associate Director of the SEC’s Philadelphia Regional Office, stated, “As alleged in our complaint, Palafox attracted investors with the allure of guaranteed profits from sophisticated crypto asset and foreign exchange trading, but instead of trading, Palafox bought himself and his family cars, watches, and homes using millions of dollars of investor funds.” Laura D’Allaird, Chief of the SEC’s Cyber and Emerging Technologies Unit, described Palafox’s actions as using the allure of crypto industry innovation to deceive investors and masking a large-scale securities fraud. The SEC’s complaint, which was filed in the US District Court for the Eastern District of Virginia, has charged Palafox with violations of federal anti-fraud and registration provisions. It seeks to prevent him from participating in multi-level marketing programs, demands the return of ill-gotten gains, and calls for civil penalties. Additionally, the complaint names several relief defendants, including BBMR Threshold LLC and individuals tied to Palafox, seeking disgorgement of their ill-gotten funds. Palafox is also facing criminal charges, with a parallel case brought by the US Attorney’s Office for the Eastern District of Virginia. In 2022, the UK High Court shut down PGI Global’s UK division for allegedly running a fraudulent scheme that promised investors returns of up to 200%. The firm claimed to offer profitable digital asset investments but failed to deliver on its promises. Authorities determined that PGI Global had stolen over $700,000 from users, with executives diverting $225,000 to personal accounts and spending $11,500 on luxury items. Meanwhile, Palafox reportedly refused to cooperate with the investigation.

The Securities and Exchange Commission accused PGI Global’s CEO of orchestrating an international scheme that raised $198 million under false crypto exchange claims. The Securities and Exchange Commission has charged Ramil Palafox, CEO of PGI Global, with orchestrating a $198 million international fraud scheme tied to crypto and forex trading, alleging he misused over $57 million of investor funds for luxury cars, designer goods, and personal expenses. According to the SEC, PGI Global claimed to be a crypto asset and foreign exchange trading company. From January 2020 through October 2021, Palafox sold “membership” packages that he said would bring investors high returns. These packages were linked to PGI Global’s “supposed crypto asset and foreign exchange trading and offered members multi-level-marketing-like referral incentives to encourage them to recruit new investors,” the SEC said. The financial watchdog claims Palafox attracted investors with the “allure of guaranteed profits” from crypto and foreign exchange trading, but instead of trading, Palafox bought himself and his family cars, watches, and homes using millions of dollars of investor funds. “Palafox used the guise of innovation to lure investors into lining his pockets with millions of dollars while leaving many victims empty-handed. In reality, his false claims of crypto industry expertise and a supposed AI-powered auto-trading platform were just masking an international securities fraud.” Laura D’Allaird, chief of the Commission’s new cyber and emerging technologies unit The SEC filed its complaint in the U.S. District Court for the Eastern District of Virginia. It seeks permanent injunctions, penalties, and the return of ill-gotten gains. Palafox also faces criminal charges in a separate case from the U.S. Attorney’s Office for the Eastern District of Virginia.