14 décembre 2024 | International, C4ISR

Thai Officials Targeted in Yokai Backdoor Campaign Using DLL Side-Loading Techniques

DLL side-loading delivers Yokai backdoor targeting Thai officials, leveraging spear-phishing lures and persistent malware techniques

https://thehackernews.com/2024/12/thai-officials-targeted-in-yokai.html

Sur le même sujet

  • Contract Awards by US Department of Defense - January 2, 2019

    3 janvier 2019 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Contract Awards by US Department of Defense - January 2, 2019

    NAVY Risk Mitigation Consulting Inc.,* Destin, Florida, is awarded a maximum amount $95,000,000 indefinite-delivery/indefinite-quantity contract for mission assurance assessments of installation/facilities infrastructure and facility-related control systems for the Department of the Navy . The work includes, but is not limited to the collection and evaluation of data concerning the criticality of facilities, utilities, industrial control systems, and supporting infrastructure based on mission impacts, probable threats and hazards, and degrees of vulnerability to determine the overall risk posture of the asset. Work will be performed at various Navy and Marine Corps installations at various locations within the Naval Facilities Engineering Command, Atlantic area of responsibility, both inside and outside the continentalU.S., including, but not limited to, California (24.6 percent); Virginia (13.0 percent); Florida (10.1 percent); Maryland (7.2 percent); Washington (5.8 percent); Hawaii (4.3 percent); Texas (4.3 percent); South Carolina (4.3 percent); Washington, District of Columbia (2.9 percent); North Carolina (2.9 percent); Mississippi (2.9 percent); Georgia (2.9 percent); Tennessee (1.5 percent); Rhode Island (1.5 percent); Pennsylvania (1.5 percent); New York (1.5 percent); New Jersey (1.5 percent); Louisiana (1.5 percent); Indiana (1.5 percent); Illinois (1.5 percent); Connecticut (1.4 percent); and Arizona (1.4 percent). The term of the contract is not to exceed 60 months with an expected completion date of January 1, 2024. Fiscal 2019 operations and maintenance (Navy) funds in the amount of $10,000 are obligated on this award, and will expire at the end of the current fiscal year. Future task orders will be primarily funded by operations and maintenance (Navy and Marine Corps). This contract was competitively procured via the Navy Electronic Commerce Online website and Federal Business Opportunities website, with six proposals received. The Naval Facilities Engineering Command, Atlantic, Norfolk, Virginia, is the contracting activity (N62470-19-D-2002). Raytheon Co., El Segundo, California, was awarded $81,224,627 for modification P00007 to a previously awarded fixed-price-incentive=-firm-target contract (N00019-17-C-0042). This modification provides for the procurement of 228 configuration components required for completion of Configuration D Retrofit Component engineering change proposals for the F/A-18E/F and EA-18G aircraft for the Navy and the government of Australia. Work will be performed in Forest, Mississippi (53 percent); Andover, Massachusetts (36 percent); and El Segundo, California (11 percent), and is expected to be completed in February 2022. Fiscal 2019 aircraft procurement (Navy); and Foreign Military Sales (FMS) funds in the amount of $81,224,627 will be obligated at time of award. No funds will expire at the end of the current fiscal year. This modification combines purchases for the Navy ($80,692,484; 99 percent) and the government of Australia ($532,143; 1 percent) under the FMS program. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. Lockheed Martin, Rotary and Mission Systems, Moorestown, New Jersey, is awarded a $28,882,337 cost-plus-incentive-fee modification to previously awarded contract N00024-16-C-5102 for AEGIS Baseline 9 Integration and Delivery, TI-08 CG Upgrade, AEGIS Baseline 9 Capability Development, Capability Improvements, Baseline 9 Sea Based Non-Cooperative Target Recognition Development and Radar Engineering. Work will be performed in Moorestown, New Jersey, and is expected to be complete by July 2019. Fiscal 2019 research, development, test and evaluation (Navy); fiscal 2013 shipbuilding and conversion (Navy); fiscal 2019 other procurement (Navy); 2019 operations and maintenance (Navy); and 2019 weapons procurement (Navy), funding in the amount of $28,882,337 will be obligated at time of award and funds in the amount of $1,530,764 will expire at the end of the current fiscal year. The Naval Sea Systems Command, Washington, District of Columbia, is the contracting activity. Bell-Boeing JPO, Amarillo, Texas, is being awarded $23,325,145 for cost-plus- fixed-fee delivery order N0001918F5004 against a previously issued basic ordering agreement (N00019-17-G-0002) in support of the V-22. This order provides support of ongoing flight test and evaluation of the V-22 test aircraft. Work will be performed at Naval Air Station Patuxent River, Maryland (90 percent); and Marine Corps Air Station Yuma, Arizona (10 percent), and is expected to be completed in December 2018. Fiscal 2018 aircraft procurement (Navy); and fiscal 2018 research, development, test and evaluation (Navy) funds in the amount of $23,325,145 will be obligated at time of award; none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. SRA International Inc., Chantilly, Virginia, was awarded an $11,336,940 firm-fixed-price contract for command, control, communications, and computer system afloat operations and sustainment support for capabilities aboard the Military Sealift Command (MSC) fleet of ships, and the MSC network operations centers. This contract includes a six-month period of performance. Work will be performed in Norfolk, Virginia, and work is scheduled to commence Jan. 1, 2019, and is scheduled to be completed June 30, 2019. This contract will be funded with Navy working capital funds; and U.S. Transportation Command working capital funds. Funds will expire at the end of the current fiscal year. This contract was awarded as an other than full and open requirement under unusual and compelling urgency procedures. Only one offer was solicited and received. The Navy's Military Sealift Command, Norfolk, Virginia, is the contracting activity. (N3220519C1000) (Awarded Dec. 31, 2018) Structural Associates Inc., * East Syracuse, New York, is awarded $10,008,000 for firm-fixed-price task order N4008519F4299 under a previously awarded multiple award construction contract (N40085-17-D-5048) for repairs for insulator shop relocation Building 166 at Portsmouth Naval Shipyard. The work to be performed provides building repairs and modernization to the historic 1941 Building 166. Exterior envelope repairs and replacement will include, but are not be limited to, roofing and wall systems, trim, windows and window systems, skylights, door repairs, concrete, the installation of roof and wall insulation, and reconfiguration of the building entrance to provide accessibility. Interior repair and renovation includes, but is not limited to, reconfiguration of existing toilet facilities, the renovation of electrical and plumbing systems, the replacement of deteriorated heating ventilation and air conditioning equipment and controls, and the modernization of fire protection systems. Work will include egress paths in order to improve space utilization, accessibility and life safety. The task order also contains five unexercised options, which, if exercised, would increase cumulative task order value to $10,691,110. Work will be performed in Kittery, Maine, and is expected to be completed by March 2020. Fiscal 2019 operations and maintenance (Navy) contract funds in the amount of $10,008,000 are obligated on this award and will expire at the end of the current fiscal year. Four proposals were received for this task order. The Naval Facilities Engineering Command, Mid-Atlantic, Norfolk, Virginia, is the contracting activity. Correction: Contract awarded on Dec. 27, 2018 to Bell Boeing JPO, Amarillo, Texas, was announced with the incorrect award amount and contracting activity. The contract should have stated the award amount of $ $24,448,390 and that the contracting activity is the Naval Air Warfare Center Aircraft Division, Lakehurst, New Jersey. All other contract information is correct. ARMY O'gara-Hess & Eisenhardt Armoring Co. LLC,* Fairfield, Ohio, was awarded a $60,736,752 firm-fixed-price contract to procure Family of Medium Tactical Vehicles protection kits. Bids were solicited via the internet with six received. Work locations and funding will be determined with each order, with an estimated completion date of Dec. 31, 2023. U.S. Army Contracting Command, Warren, Michigan, is the contracting activity (W56HZV-19-D-0041). Endeavor Robotics Inc., Chelmsford, Massachusetts, was awarded a $32,400,000 firm-fixed-price contract for reset, sustainment, maintenance, and recap parts for Robot Logistics Support Center technicians to support the overall sustainment actions of the entire Endeavor family of small, medium, and large robots. Bids were solicited via the internet with one received. Work locations and funding will be determined with each order, with an estimated completion date of Jan. 2, 2024. U.S. Army Contracting Command, Warren, Michigan, is the contracting activity (W56HZV-19-D-0031). CORRECTION: An $89,520,585 modification (0053 09) to contract W52P1J-11-G-0053 awarded to BAE Systems Ordnance Systems Inc., Radford, Virginia, announced Dec. 31, 2018, listed the wrong amount of funds obligated. The correct amount of obligated funds is $7,895,422. All other information in the announcement was correct. AIR FORCE BAE Systems Information and Electronics Systems Integration, Nashua, New Hampshire (FA8604-19-D-4021); The Boeing Co., Defense, Space & Security, St. Louis, Missouri (FA8604-19-D-4022); General Atomics Aeronautical Systems Inc.(GS-ASI), Poway, California (FA8604-19-D-4020); Goodrich Corp., UTC Aerospace Systems, ISR Systems, Westford, Massachusetts (FA8604-19-D-4023); Harris Corp., Electronic Systems, Integrated Electronic Warfare Systems, Clifton, New Jersey (FA8604-19-D-4027); Lockheed Martin Corp., Lockheed Martin Aeronautics Co., Fort Worth, Texas (FA8604-19-D-4026); Northrop Grumman Systems Corp., Northrop Grumman Aerospace Systems, Melbourne, Florida (FA8604-19-D-4024); and Raytheon Co., Raytheon, El Segundo, California (FA8604-19-D-40250), have been awarded $22,500,000 ceiling indefinite-delivery/indefinite-quantity contracts for the formation of a collaborative working group of various industry partners to work as single extended entity to develop, evolve, update via pre-planned product improvement initiatives, as well as manage and provide configuration control of the open mission systems and universal command and control interface standards, collectively referred to as the Open Architecture Standards. These contracts provide for the development, updating and management of the above standards with the following business goals, promote adaptability, flexibility, and expandability; support a variety of missions and domains; simplify integration; reduce technical risk and overall cost of ownership of weapon system programs; enable affordable technology refresh and capability evolution; enable reuse; enable independent development and deployment of system elements; and accommodate a range of cybersecurity approaches. Work will be performed at the industry partner facilities in Nashua, New Hampshire; St. Louis, Poway, California; Westford Massachusetts; Clifton New Hampshire; Fort Worth, Texas; and Melbourne, Florida, and is expected to be complete by December 31, 2022. This award is the result of a sole-source acquisition. Air Force Life Cycle Management, Wright Patterson Air Force Base, Ohio, is the contracting activity. *Small business https://dod.defense.gov/News/Contracts/Contract-View/Article/1723366/

  • Trump admin officially makes it easier to export military drones

    27 juillet 2020 | International, Aérospatial

    Trump admin officially makes it easier to export military drones

    By: Aaron Mehta and Valerie Insinna   This is a developing story. Stay tuned for updates. WASHINGTON — The U.S. State Department has officially loosened restrictions on exporting military-grade unmanned aerial vehicles to foreign nations, a move long sought by the defense industry. Under a new policy announced Friday, unmanned aerial systems that fly at speeds below 800 kph will no longer be subject to the “presumption of denial” that, in effect, blocked most international sales of drones such as the MQ-9 Reaper and the RQ-4 Global Hawk. R. Clarke Cooper, the assistant secretary bureau of political-military affairs, announced a change to how the United States interprets the Missile Technology Control Regime, or MTCR, Friday. News that the change was imminent, and that it would focus on reinterpreting the regulations with a focus on speed, was first reported Thursday by Defense News. The U.S. government's interpretation of the export controls had led to a blanket denial of most countries' requests to buy “category-1” systems capable of carrying 500-kilogram payloads for more than 300 kilometers. Instead of having a “presumption of denial” for those drones, where export officials needed special circumstances to allow the sale of the drones, the new guidance would mean those officials would now consider proposed sales using the same criteria as they do for other military exports. Cooper stressed that the UAVs covere includes “no risk for weapons of mass destruction delivery. Higher-speed systems such as cruise missiles, hypersonic aerial vehicles, and advanced unmanned combat aerial vehicles are not affected by this revision.” The regulations were primarily introduced to regulate the sale of cruise missiles abroad, but the interpretation also covers certain unmanned vehicles. The United States has been exploring a change in how to interpret the MTCR for some time, with discussions centered around the “presumption of denial” clause for category-1 UAVs. Speaking at the Hudson Institute shortly after Cooper's remarks, Assistant Secretary for International Security and Nonproliferation Chris Ford stressed said the administration plans to keep pushing other nations in the agreement to come to a similar stance, but that “the United States is not willing to let U.S. interests be forever held hostage” by international decision makers. Ford also said that there is a specific member of the MTCR “seems to have prioritized reflexive opposition to anything the United States proposes,” and would block any potential changes. Although not listed by name, Ford later indicated he was talking about Russia. In a statement, Sen. Bob Menendez, D-N.J., the ranking member of the Senate Foreign Relations Committee, called the move a “reckless decision” that makes it “more likely that we will export some of our deadliest weaponry to human rights abusers across the world.” Menendez has been central in trying to block arms sales to Saudi Arabia over human rights concerns. Industry impact The decision primarily opens up sales opportunities for General Atomics and Northrop Grumman, which manufacture multiple slow-moving UAS impacted by the presumption of denial clause. Most medium-altitude, long-endurance systems like General Atomics' MQ-1 Predator and MQ-9 Reaper fly at slow speeds, with the Reaper clocking in with a cruise speed of 230 mph, or 370 kph, according to an Air Force fact sheet. Northrop Grumman's RQ-4 Global Hawk, a high-altitude drone used for intelligence, surveillance and reconnaissance, flies at a cruise speed of about 357 mph, or 575 kph. Immediately after the announcement, both companies issued statement heralding the change. “It is critical for our national security that our export policies continue to keep pace with the rapid evolution of technology and support collaboration with our allies,” said Northrop Grumman spokesman Tim Paynter. He pointed to the company's MQ-8 Fire Scout as another UAS that could be more widely exported as a result of the new interpretation. In addition, Niki Johnson, General Atomic's vice president for government affairs and strategic communications, said “We welcome the changes announced today that will alter the treatment of General Atomics' UAS under U.S. export policy. We look forward to this announcement leading to approvals for sales to a larger portion of the international market.” Ford declined to speculate about how much money may trade hands as a result of the change, aside from broadly saying he expects it will have a “ripple effect” for countries who may be on the market for unmanned systems. While broadly seen by the defense industry as a positive step forward, one industry source expressed concerns that the changes announced Friday could ultimately be toothless. In April 2018, the Trump administration announced a number of policy reforms aimed at speeding up the sales process, such as allowing certain UAS to be exported via the Direct Commercial Sales process as opposed to the more laborious Foreign Military Sales process. But those changes did not have the intended consequences, the industry official said. “Implementation of the 2018 policy was very slow. It did not actually lead to that many new approvals in terms of countries that we can export to. So while we think this change will help us overcome the MTCR question during the policy review process, we still think that there is a higher hurdle for UAS within the conventional arms transfer policy ordeal,” the source said. Companies could still hit “brick walls” within the normal State Department arms sale process if, for instance, the department finds that drone sales negatively alter the military balance among countries in a given region. “The question for us is: Does this lead to policy approvals that allow us to go sell?” the source said. This person added that if sales do not immediately begin to move forward, it's possible that — should former Vice President Joe Biden win the presidential election in November — the incoming Democratic administration could roll back the MTCR interpretation changes. During a phone call with reporters, Cooper stressed that the change in policy will not result in a blanket approval for all UAS sales. “It is case by case,” he said. “It's not just a matter of addressing the [MTCR] requirement, because while UAS systems vary widely in their sophistication and application, it's incumbent upon the United States that we ensure that the systems we sell are used responsibly and will not threaten our interest or those of our allies.” Rachel Stohl, vice president for defense issues at the Stimson Center, called the unilateral decision by the White House “yet another affront to international agreements and global arms controls.” “Let me be clear: A presumption of denial is not a ‘no,' ” Stohl said. “It just means you have to work a little harder to get to ‘yes' and ensure that a lethal system that can change the nature of conflict, has raised serious questions and concerns about the legitimacy, legality, and strategic efficacy of their use, and has demonstrably impacted civilian lives is in the best interest of the United States. “Once again, the Trump administration is focused on short-term economic gain rather than medium- to long-term security and foreign policy interests.” But Michael Horowitz, a professor and director of the Perry World House at the University of Pennsylvania, argues that the change is long overdue. “Treating uninhabited aircraft as missiles for export policy purposes doesn't work,” Horowitz said. “It has allowed China to capture a significant chunk of the drone export market, including with U.S. allies and partners.” However, Horowitz added that the decision to focus on speed may miss the big picture. “Rather than simply treating uninhabited aircraft as aircraft for export purposes, the new policy creates a speed test that addresses issues for current platforms,” he said. “Depending on implementation, this could be a policy improvement, but it could also lead to issues down the road as the uninhabited aircraft category evolves.” https://www.defensenews.com/industry/2020/07/24/us-state-department-officially-makes-it-easier-to-export-military-drones/

  • White House Orders New Icebreaker Strategy For Coast Guard

    10 juin 2020 | International, Naval, Sécurité

    White House Orders New Icebreaker Strategy For Coast Guard

    “I certainly hope the Pentagon is not going to come back after studying this again, saying there's no need," for more Arctic infrastructure, said Sen. Dan Sullivan. "The infrastructure is not fine. It doesn't exist. And we need it to exist.” By PAUL MCLEARYon June 09, 2020 at 5:37 PM WASHINGTON: The White House today ordered a major rethink of current plans for a new Coast Guard heavy icebreaker fleet, calling for the ability to launch drones, install intelligence-collection systems, and consider “defensive armament” to “defend against threats by near-peer competitors” and consider the “potential for nuclear-powered propulsion.” The call to consider new designs for at least three ships already slated to be built over the next half-decade is a sure sign of growing concern in Washington over Russian and Chinese advances in putting more heavy, nuclear-powered ships in the water while the US remains stuck with just two 40 year-old operational breakers. The Coast Guard already has plans for three new, non-nuclear icebreakers to be built by 2026, with several medium icebreakers to follow in later years. It's not clear if the White House is asking for a complete redesign of those ships, but the memo clearly indicates a desire to expand their capabilities significantly. The memo gives acting Homeland Security secretary Chad Wolf, in conjunction with the State and Defense departments, just 60 days to come up with a plan to run a study of how to build a new icebreaking fleet that consists of “at least” three heavy polar-class security cutters that are “operationally tested and fully deployable by Fiscal Year 2029.” The ships should be able to perform “the full range of national and economic security missions (including the facilitation of resource exploration and exploitation and undersea cable laying and maintenance),” the memo states, a clear nod to worries that both China and Russia are rushing to secure natural resources long trapped under the polar ice caps. The Pentagon and Navy are slated to take part in the snap 60-day assessment, which includes a demand for recommendations for least two new bases in the US, and at least two new international bases. At least one of those bases would likely be in Alaska, meeting a years-long demand from Alaska Senator Dan Sullivan, who is waiting for the Pentagon to finish a study on a potential strategic port in his state later this summer. Sullivan managed to get language in the 2020 defense authorization bill ordering the Pentagon to study new ports in Alaska, after years of the military saying there was no need. “At long last, the federal government has woken up to the fact that the Arctic is a region of great strategic competition,” the senator said in an emailed statement. “Unfortunately, our adversaries are well ahead of the United States when it comes to Arctic infrastructure.” Noting his efforts to bring the Pentagon's attention to these issues, he added, “this presidential memo will add weight to these efforts and will send a signal to our adversaries and those who are laying claim to the Arctic that the United States will not cede ground in this strategic location.” Pentagon officials have said privately that refurbishing existing ports in Alaska for military use would be expensive, and they're not fully convinced there is a need. Sullivan, aware of those arguments, added, “I certainly hope the Pentagon is not going to come back after studying this again, saying there's no need. The infrastructure is not fine. It doesn't exist. And we need it to exist.” One congressional staffer who is familiar with with the issue said part of the problem Arctic advocates have encountered is that “there is no clear official within the Department of Defense that handles Arctic issues,” and despite some efforts on Capitol Hill to create a new deputy assistant secretary of defense for the Arctic, military leaders see the region as “not as high a priority as some other things — the Department of Defense seems to be one of the last federal agencies in the country to understand the strategic importance and relevance of the Arctic.” While the Coast Guard already has an icebreaker plan in hand, this new White House push might scramble those if the executive branch demands significant changes to the class, the first of which is slated to begin construction in 2021. As Washington ponders the possibility of building nuclear-powered icebreakers, two Russian companies are already at work building the world's most powerful nuclear breaker, the first step in an ambitious new Arctic strategy Moscow hopes will open lucrative new shipping routes in the Arctic. The country currently operates 40 icebreakers along the Northern Sea Route in the high north. Moscow has also unveiled plans to build dozens of non-nuclear new icebreakers in the coming years, including at least 13 heavy icebreakers, nine of which would be nuclear-powered, if plans laid out by Russian President Vladimir Putin hold. For its part, China has already matched the US in the number of icebreakers it has in its fleet, though only one of the two was built domestically. Beijing has expressed a desire to float a nuclear-powered breaker at some point in the future, though plans remain unclear. The first ship, MV Xuelong, was built at a Ukrainian shipyard but has since been upgraded by Chinese shipyards. https://breakingdefense.com/2020/06/white-house-orders-new-icebreaker-strategy-for-coast-guard

Toutes les nouvelles