Cyber Weekly Digest - 2022 Week #5

Updated: Apr 12

In this week’s Cyber Weekly Digest we take a look at some of the latest supply-chain disrupting cyber attacks impacting organisations around the world including a German petrol distributor and UK snacks producer. Keep reading to stay up to date on the latest cyber security news.

1. KP Snacks has been hit by a Conti ransomware attack.

KP Snacks, a major producer of popular British snacks has been hit by the Conti ransomware group affecting distribution to leading supermarkets. Due to the attack deliveries from KP Snacks to leading superstores are reportedly being delayed or cancelled altogether, which could last until March. A private leak page shows the Conti ransomware group claiming responsibility for the attack, by posting samples of stolen files.

2. APT35 is using a new Powershell backdoor called PowerLess.

The Iranian advanced persistent threat (APT), Charming Kitten is now deploying a new backdoor which researchers have dubbed PowerLess Backdoor, a previously undocumented PowerShell trojan that supports downloading additional payloads, such as a keylogger and an info stealer. Researchers noted that the PowerShell code runs in the context of a .NET application, therefore not launching 'powershell.exe' which enables it to evade security products.