Introducing Nightwing — new intelligence services company, 40 years in the making

SentinelLabs reveals information on four previously unreported Chinese front companies taken down by the U.S. government Oct. 10.

Included in the Phobos-hit organizations that paid a ransom were a California public school system, a North Carolina children's hospital, a Maryland-based accounting and consulting service provider, and health organizations in Pennsylvania and Maryland, revealed an unsealed indictment against suspected Phobos administrator Evgenii Ptitsyn.

Attacks involving Ghost Tap commence with the compromise of payment card data and one-time passwords for virtual wallets, which are then delivered by a relay server to money mules who could withdraw the funds without being easily detected, representing a marked improvement from the previously discovered NGate attacks that required ATM withdrawals for threat actors.