More stories

  • in

    StarHub unveils five-year transformation plan focused on 'digital life'

    StarHub has unveiled a five-year business transformation plan that will see the Singapore telco focus on becoming a “full-on digital life” and digital services provider. It also is aiming for a further cost savings of SG$280 million ($205.54 million) and SG$220 million ($161.5 million) in gross profit growth cumulatively between 2022 and 2026. Coining it “DARE+”, StarHub said Monday it concluded the first phase of its DARE transformation journey last month, which yielded cost savings in excess of SG$270 million ($198.2 million) and was higher than its original target of SG$210 million. It also slashed its operating expenditure by 15%. The telco now would look to attain “sustainable revenue growth”, “potential growth” in dividends, and product margins with the introduction of 5G products and services. It also was aiming for further operating cost savings with its digital transformation efforts and migration from legacy systems. 

    These efforts would drive its target of achieving SG$280 million in cost savings as well as SG$220 million in gross profit growth over its fiscal years of 2022 to 2026. StarHub said its five-year “transformation and growth” roadmap would see the telco become a company “that connects digital lives” for customers. “DARE+ anchors on doubling down on digital across everything StarHub does, accelerating value creation, realising growth without frontiers, and delivering an endless continuum of experiences that enrich customers’ lives,” it said. CEO Nikhil Eapen said: “StarHub is changing, going beyond telco to becoming a full-on digital life and digital services provider of the most enriching connectivity, entertainment, and other lifestyle experiences, as well as innovative business solutions for our customers, with frictionless digital engagement at our core.”With DARE+, StarHub said it would offer over-the-top (OTT) streaming entertainment, cloud games, and digital services. For consumers, this would see the telco “meshing” its products and services into all-in-one offerings. For instance, shows and movies could be accessed on TVs, phones, tablets, and web browsers through its hybrid linear-OTT platform StarHub TV+. 

    It pay TV business also has been rebranded to Entertainment to encompass other complementary services, such as 5G cloud games, and new products and verticals that the telco planned to introduce in future. In the enterprise market, StarHub pointed to plans to beef up its play in cybersecurity and the region’s ICT industry through Ensign InfoSecurity, its joint venture with Temasek Holdings, and subsidiary Strateq, as well as planned acquisitions of MyRepublic Broadband and HKBN JOS in Singapore and Malaysia. StarHub added that it would explore further potential acquisitions to further grow its footprint, but did not specify market segments it was looking at.The telco is the latest amongst local players to embark on a business transformation plan in recent years, following similar announcements from M1 and Singtel. All three telcos also saw leadership changes in the last three years, with StarHub’s Eapen taking on the CEO role last December, after a months-long search. Singtel’s group CEO Yuen Kuan Moon assumed his position in January this year, while M1 CEO Manjot Singh Mann took over the helm in December 2018.RELATED COVERAGE More

  • in

    NextDC takes one-fifth stake in AUCloud during $35m capital raising

    AUCloud has announced it will commence a AU$35 million capital raising, which will comprise NextDC taking up approximately a 20% stake in the company as the former eyes plans for national expansion.AUCloud said in a statement that it will raise the total by issuing new shares at AU$0.50 per share, which will also include a placement to NextDC of approximately AU$12.4 million.According to AUCloud, the funding will largely be used to scale the company to “critical mass”.”We continue to see a trend towards greater emphasis on sovereign cloud services to ensure all data remains within Australian legal jurisdictions,” AUCloud CEO and managing director Phil Dawson said. “Our strategic partnership with NEXTDC, a leading provider of premium data centre facilities, will provide access to a powerful national network of 1,500+ enterprise customers and 730+ channel partners. “This equity raising capitalises AUCloud to extend its platform footprint into Brisbane, Melbourne, and Adelaide, and expand its customer reach into the large security-conscious enterprise market.”NextDC will also be entitled to a place on the AUCloud board, which will initially be NextDC CEO and managing director Craig Scroogie.

    “NextDC has an in-depth understanding of the underlying cloud market dynamics gained through our national network of premium data centre facilities across Australia. Following the injection of growth capital into AUCloud, we believe Phil and the team are very well positioned to benefit from the increasing trend towards sovereign IaaS cloud and high security solutions,” Scroogie said.AUCloud expects its pro-forma net cash position will increase to AU$41.5 million as of 31 October 2021 post-equity raising.AUCloud was one of four cloud providers that were certified strategic status under the Australian government’s hosting certification framework in October. This followed in the footsteps of NextDC, after it became a certified player to store sensitive data locally in August. Related Coverage More

  • in

    Eftpos added security features go-live as digital upgrades continue

    Australian payments provider Eftpos has gone live with new online security features through a handful of payment merchants, ahead of a full rollout next year.These security features, which include two-factor authentication functionality, has initially been adopted by Till Payments, Fat Zebra, and Eftex. The rollout of these features is part of Eftpos’ five-year, AU$100 million investment it’s making on digital upgrades to its network, designed to enhance the level of protection up-front for consumers and merchants, rather than retrofitting security to legacy systems.  “This is a tipping point for Eftpos, online Australian businesses and the digital economy, and it is great to have partners like Till Payments, Fat Zebra, and Eftex onboard,” Eftpos chief Stephen Benton claimed.”This is a game changer for Eftpos and Australian retailers because retail is quickly transforming to become an increasingly digital marketplace, accelerated by COVID. Big economic benefits could flow from increased competition in addition to enhanced payments security.”The company said Eftpos payments are already available online for some card-on-file payments where banks have implemented the service for their merchant customers. Since launching the Eftpos digital service that enables LCR last year, Eftpos said it has been subject to zero fraud.LCR is an initiative aimed at promoting competition in the debit card market and helping to reduce payment costs in the economy.

    When a customer makes a contactless “tap-and-go” payment with their dual-network debit card — not credit cards, however — the merchant may choose to send the transaction via the debit network that costs them the least to accept. If the merchant chooses not to route, the transaction is instead sent via the default network which is programmed on the card, typically the Debit Mastercard or Visa Debit network.If a merchant uses LCR, it should not affect which deposit account the funds are paid from, and the three networks — Eftpos, Visa, and Mastercard — offer similar protections to the cardholder from fraud and disputed transactions.”This Eftpos extension will allow eCommerce merchants to securely send millions more online payments through Eftpos, resulting in substantial payment acceptance cost savings for their business and their customers,” Eftex general manager Ian Sanford said.Latest Finance News From Australia More

  • in

    For a limited time, new users can get a lifetime of VPNSecure Online Privacy for just $40

    StackCommerce

    ZDNet Recommends

    It’s amazing how much affordable self-paced training is available online these days. For instance, even if you have no experience whatsoever, you can learn to be a Python programmer in no time and their average salaries are over $80,000 a year. But you could also become an ethical hacker, learn to be a game developer or so many other choices.However, just like when you are doing anything else online, you need to be extremely careful about protecting yourself when accessing educational content. And now, new users need never worry about that again, because a VPNSecure Online Privacy: Lifetime Subscription is currently available for only $39.99 during our pre-Black Friday sale.Obviously, your traffic will be encrypted so that hackers aren’t able to get access to your data. VPNSecure renders your traffic on the service unrecognizable with Stealth VPN. You also have full stack IP support (IPv4 + IPv6) and kill switches that will automatically disconnect you from the internet if your VPN connection is dropped. Your IP address and location will be hidden and VPNSecure has a strict policy of absolutely no logging.Since you have access to servers in more than 45 countries, and new ones are being added all the time, you will be able to watch all of your favorite content no matter where you happen to be. And VPNSecure fully supports torrents, yet you are allowed unlimited bandwidth, so you should be able to stream smoothly with no buffering.You can use the service on five devices simultaneously, on desktop or mobile. There is an ad blocker option that is available at no extra charge and so many other convenient features.Even Security.org was impressed. They said:”VPNSecure provided us with nearly everything we needed to search the web safely and even included some unique features like the Meta Search Engine.”

    You really don’t want to pass up this opportunity to protect yourself online for a lifetime. If you are a new user, get VPNSecure Online Privacy: Lifetime Subscription now while it’s available for only $39.99.

    More ZDNet Academy Deals More

  • in

    Enterprise 5G is a software 'revolution,' says startup Celona

    Celona founders, from left, Rajeev Shah, CEO, Ravi Mulam, founding engineer, Vinay Anneboina, founding engineer, and Mehmet Yavuz, CTO. 
    Celona
    The common conception of 5G wireless service is as a faster radio connection for laptops and smartphones, multiple gigabits over the air. But you may need to revise most everything you think about 5G to understand its true significance.  For enterprises, which are increasingly interested in using 5G indoors, as a networking technology, one of the most important aspects of 5G is that it is about structuring the network for defined service in a way that could never be done before. That aspect of the matter, which is largely about software, means that 5G is much more than a radio upgrade.  It could, in fact, bring significant change to the way that software runs networking for corporate LANs. “Nokia and Ericsson and Cisco are in the middle of an interesting transition,” said Özer Dondurmacioğlu, who is vice president of technical marketing for two-year-old startup Celona, in an interview with ZDNet via Zoom. “For them, transitioning to 5G feels just like a radio transition, but the software architecture is completely changing,” says Dondurmacioğlu. “They are in the middle of this big, invisible software architecture revolution.” That software revolution is how Celona expects to make an end-run around Cisco and others. The startup is a young contender in a broad movement to bring 5G to enterprises as a supplement to, and sometimes a replacement for, WiFi-based wireless LANs. Celona has received $40 million in venture capital financing from top funds, including Lightspeed, Norwest, In-Q-Tel, Cervin Ventures, the venture capital arm of wireless chip giant Qualcomm, and the venture capital arm of Japan’s giant telco NTT. 

    A Series B round of funding last year brought in $30 million in one fell swoop. Also: Dish makes deals with Equinix, Cisco to build out 5G network Celona started selling equipment a year ago. The Cupertino California-based company this past year opened a small engineering facility in Bangalore. The company employs 85 people in total at the moment.  What is key for Celona is that rather than sell telco software, it is offering software with an enterprise focus, software meant to be used by CIOs and sys admins. The company views itself as righting the wrongs of both WiFi wireless LANs as well as traditional private networks built on cellular spectrum. “The private LTE market has been around for a while,” Dondurmacioğlu observed, “and they have been doing one thing quite wrong.” Those traditional parties have tried to “just sell their existing infrastructure” to enterprise with no accommodation for how enterprises run.  To Dondurmacioğlu, who is of Turkish descent, that is the equivalent of “putting some yogurt on a burger” rather than creating “proper Mediterranean food.” Dondurmacioğlu, and Celona’s chief technologist, Mehmet Yavuz, who took part in the same interview via Zoom, are veterans of the enterprise LAN and telco domains. Dondurmacioğlu was a vice president with Aruba, the wireless LAN unit of Hewlett Packard Enterprise, for fourteen years. Yavuz, who started his career at telco equipment giant Nortel, was vice president of engineering at Qualcomm for almost fifteen years. Celona’s CEO, Rajeev Shah, was also an Aruba exec for eleven years.  Both Dondurmacioğlu and Yavuz see what WiFi and what private cellular each failed to achieve. While improving the corporate wireless LAN, Celona’s technology aims to fulfill the premise of private cellular, namely, more selective control of the network, the same way that a carrier is able to structure their wide-area network for quality of service. Celona’s 5G access points.
    Celona
    Also: 6 things businesses can do right now to leverage 5G “It’s just designed to equate to WLAN,” said Yavuz of the company’s 5G LAN. “There is LAN, there is WLAN, which is WiFi, and there is 5G LAN, and they are all part of the enterprise LAN family.”  Switch equipment from Celona will use 5G frequencies below 6 gigahertz, a part of the so-called S Band of spectrum that is licensed by the FCC for broad commercial use, known as the CBRS, or Citizens Broadband Radio System.  With Celona’s access points, companies can carefully structure their networks so that individual network services will have a kind of guaranteed private lane to operate with quality of service assurances. The switch registers with what’s known as a spectrum access system, or SAS, a cloud-based server that manages access to the spectrum by CBRS client devices.  The SAS server is a hosted service provided by Google and others including Arlington, Virginia-based cloud provider Federated Wireless. Celona management console.
    Celona
    Prior to operation, the SAS service has to be certified by the U.S. Federal Communications Commission. Celona ships its products bundled with a SAS license from either Google or Federated. When the products are installed, a Celona network then requests authorization from the SAS service for private spectrum access for all the access points. As a result of the SAS approach, the cellular frequencies of CBRS, like cellular networks generally, have freedom from interference that was never assured with wireless LANs using WiFi.  “I worked on some pretty interesting WiFi deployments at Aruba,” recalled Dondurmacioğlu. “I always had to contend with interference from my neighbor networks, and from within the network itself,” he said. “I would deploy 28 devices in a hospital, I had to make sure they don’t interfere with each other through some terrible channel planning, and then that my neighbors don’t interfere with me.” Also: 5G’s biggest benefits will arrive where you’d least expect them “I don’t have that problem with cellular — by design,” he said. Cellular schedules all traffic flows between all devices on the network. “The concept of radios stepping over each other is gone.” Not only is interference banished by the SAS, but the QOS for every service is rigorously enforced with cellular. What that means, and what is lost in the many press releases from Cisco and Dish and others, is that 5G is not just about speed, a faster radio. More important than speed, 5G is about latency, the longest delay in sending a bit of data from point A to point B. In his Aruba projects, “We never were able to guarantee a service level,” Dondurmacioğlu recalled. “I could say that this video traffic goes before this data traffic,” but he could not guarantee a certain number of megabits would be actually given to the video stream. That kind of allocation of bits is, again, by design available in cellular. When Celona talks to enterprises about lack of interference and about rigorous QOS, “They go, yeah, we were never able to do that,” he said, “and they want to talk about how they can start doing that.” CBRS is just one band at the moment, approximately 3.5 gigahertz to 3.7 gigahertz. The 150 megahertz of spectrum afforded in that band is more than enough to cover the needs of most corporate offices, said Yavuz.  “I worked on some pretty interesting WiFi deployments at Aruba,” Özer Dondurmacioğlu, Celona’s vice president of technical marketing, recalls. “I always had to contend with interference from my neighbor networks […] We never were able to guarantee a service level […] I don’t have that problem with cellular — by design.”
    Celona
    “The way we look at it is, sub-6 [gigahertz] is a really solid solution in enterprise for both indoor and outdoor coverage,” said Yavuz. “It can cover a large range.”  Also: 5G isn’t quite there, and MixComm believes it has the millimeter wave fix For specific use cases, said Yavuz, one can supplement S Band with higher-frequency millimeter wave technology, an area of the electromagnetic spectrum that some believe will be very important for 5G over time.  As much as cellular transforms wireless LAN, on the flip side, Celona believes it can be enterprise-friendly in ways telcos never could with LTE. Yavuz spent years at Qualcomm working with the carriers. “My passion was to bring that cellular technology to enterprise” when he ran the so-called small cells effort at Qualcomm, Yavuz recalled. “From the hardware perspective, Qualcomm did a lot of work to make SoCs [systems on chip] to make that base station into a small cell.” He observed the intransigence of an entrenched industry that couldn’t adapt its ways. “We worked really hard with cellular operators to get them to embrace” small cells. “We said, There’s hundreds of billions of square feet of enterprises, worldwide, why don’t you use this solution to bring cellular inside the enterprises.” Instead, the telcos used the technology as a backhaul offering, to carry traffic from the campus back to the carrier’s core network. The result was “a distributed antenna system that was totally separate from enterprise,” explained Yavuz. “They sent their own field engineers, with their own firewalls and cabling, and before you knew it, enterprises said, Am I going to have one from Verizon, and one from AT&T, and one from Sprint? This doesn’t work.” Also: DISH partners with IBM for new cloud-native 5G network Qualcomm cooperated with the network operators’ byzantine processes of document writing and approvals, to little avail. “After years and years of trying, I just gave up,” said Yavuz. That’s when Yavuz began talking with Celona co-founder Shah, musing about a new kind of venture. Instead of sell the same old stuff, Celona started life two years ago with a “new software architecture from scratch” to run 5G access points that it sells to smoothly plug into corporate LANs. That means the technology uses existing DHCP servers and firewalls and policies. “When we talk to CIOs, they just get it,” said Yavuz. “They see, Oh, I can incorporate this into my network, I know how to manage it, I know how to connect my devices, and it becomes part of my solution, instead of a shadow solution, yet another network.”  “That’s how we really differentiate ourselves.” The applications of enterprise 5G will be things such as robotics systems, and video feeds from numerous cameras, the kinds of applications that can benefit from low latency and guaranteed quality of service.  “Many of these applications are driven by the enterprise verticals,” said Yavuz.  Also: Verizon and Microsoft team up to offer 5G edge cloud computing for businesses “We were surprised,” said Dondurmacioğlu. “We thought we would start with projects where the iPhone was the client device, and we do see those sorts of things, but now we are in the middle of supporting automated, guided vehicles in outdoor spaces in a mining site, to robots in a warehouse.” Those vertical-market applications ultimately need greater software smarts, said Dondurmacioğlu, given that they involve technology from multiple vendors that may be customized to an enterprise operation. “Two different factories in the same city might be using two different robotics technologies, and they have different underlying traffic flows” in the pattern of wireless traffic. Enterprise engineers, versed in Cisco network operations, for example, understand that, said Dondurmacioğlu.    As much as Celona lies outside the fold of traditional telecom and private cellular offerings, the company has been nimble in finding partners to use its technology. It has a partnership with Aruba at Hewlett Packard Enterprise. NTT, which has a North American operation for managed network services, is using the Celona equipment, as is SBA Communications. Large customers include the St. Luke’s Hospital complex of Boise, Idaho. The company has 35 customers in all. “I think it would be nice to have more validation of our approach” from carriers to go after enterprise. “Our message to them is, Hey, you can actually go after a very sizable market opportunity here, and very fast, if use an architecture that serves them, rather than the same old garbage from the past.” Conversations with carriers are ongoing, he said.  As for the traditional network suppliers, they will be challenged by the continuing software revolution, said Dondurmacioğlu.  5G is not only about latency and rigorous QOS, he said, it is about the entire move of infrastructure to cloud technologies. “4G required certain network functions, and 5G comes in and says, change all of that, make it more like cloud software,” said Dondurmacioğlu. “Put your network functions into containers, and micro-services.” “The software architecture is completely changing,” he said. For Cisco and other traditional vendors, that means “hundreds more people trained, a lot of software re-written, support upgraded,” and many more variables. Cisco and fellow legacy vendors talk about having multiple antennas, but “you ask them about the software, they’re not as forthcoming.” If the value proposition of those traditional vendors is “just add a lot more radios,” without software innovation, “I wonder if they will have an easy time as much as we will in that transition,” he said. More

  • in

    FBI warning: This zero-day VPN software flaw was exploited by APT hackers

    The FBI has warned that a sophisticated group of attackers have exploited a zero-day flaw in a brand of virtual private networking (VPN) software since May.

    The FBI said its forensic analysis showed that the exploitation of the zero-day vulnerability in the FatPipe WARP, MPVPN, and IPVPN software, by an advanced persistent threat (APT) group, went back to at least May 2021. It did not provide any further information about the identity of the group.The vulnerability allowed the attackers to gain access to an unrestricted file upload function to drop a webshell for exploitation activity with root access, leading to elevated privileges and potential follow-on activity, the FBI said, noting: “Exploitation of this vulnerability then served as a jumping-off point into other infrastructure for the APT actors.”See also: A winning strategy for cybersecurity (ZDNet special report).The FBI said the vulnerability affects all FatPipe WARP, MPVPN, and IPVPN device software prior to the latest version releases, 10.1.2r60p93 and 10.2.2r44p1.It warned that detection of exploitation activity might be difficult, as cleanup scripts designed to remove traces of the attackers’ activity were discovered in most cases.”Organizations that identify any activity related to these indicators of compromise within their networks should take action immediately,” the FBI said in an alert.

    “FBI strongly urges system administrators to upgrade their devices immediately and to follow other FatPipe security recommendations such as disabling UI and SSH access from the WAN interface (externally facing) when not actively using it.”FatPipe has its own advisory FPSA006, which notes: “A vulnerability in the web management interface of FatPipe software could allow a remote attacker to upload a file to any location on the filesystem on an affected device.”The vulnerability is due to a lack of input and validation checking mechanisms for certain HTTP requests on an affected device. An attacker could exploit this vulnerability by sending a modified HTTP request to the affected device.” More

  • in

    Self-driving robots key to future of our food

    Fieldin

    Innovation

    Acquisitions are shaking up the smart farming landscape. The latest example comes via Fieldin, the world’s largest smart farm operations management company for high-value crops, which has acquired agricultural autonomous driving company Midnight Robotics.The acquisition is a sign of rapid maturation in smart farming, which uses IoT sensors and AI to manage farm operations with unprecedented precision and is helping reshape food manufacturing in wealthy markets. The acquisition creates a sensor-based operational farming platform with autonomous driving technologies to empower growers in the day-to-day management of their farms. It’s the ag equivalent of the lights out farm, and the concept has already been deployed in large California farms.”Many people think that autonomous tractors are some magic solution, but at the end of the day, they’re just machinery — your autonomous farm can only be as good as your farm management data, and that’s why this acquisition is driving the autonomous farming revolution forward,” says Boaz Bachar, CEO and Co-Founder of Fieldin. “Over the past eight years, we’ve digitized hundreds of farms and over 10,000 tractors and pieces of farming equipment — more than anyone else in the high-value crop world — and amassed a trove of invaluable data that can offer insights into best practices in farm management. By acquiring Midnight Robotics, we’re helping farmers close the loop from insight to autonomous action, so they know exactly what they need to do and execute it autonomously, all through the same platform.”Agriculture has been rapidly adopting IoT and automation technology in response to growing pressures that include labor scarcity, climate change, and drought. Precision agriculture, the catch-all for digital technology-powered farming, is being adopted in various use cases to introduce manufacturing-level efficiencies into food production. Fieldin’s platform collects farming data via distributed sensor networks and offers guided decision-making insights about things like pesticide use and water management. Thanks to the addition of autonomous tractors, the decisions can now be executed autonomously. Fieldin is retrofitting tractors and other farming machinery with LiDAR-based autonomy kits that feed data back to its platform in real-time.”It’s not enough to have great agricultural data or great autonomous technology — you need to have both to make autonomous farming a reality. What’s so powerful about this merger is the potent combination of Fieldin’s unparalleled farming data collection, which includes over 49 million hours’ worth of tractor driving, with our driverless technology expertise,” Midnight Robotics co-founder Yonatan Horovitz. “We’re excited to join forces with Fieldin because only together will we be able to help farmers reap the benefits of smart and autonomous farming — not a decade from now, but today.”The company’s retrofit kit is capable of turning any tractor into a robot using advanced LiDAR perception algorithms. More

  • in

    Microsoft warning: Now Iran's hackers are attacking IT companies, too

    Microsoft has raised an alarm about a massive surge in Iranian state-sponsored hacking attempts against IT services firms.

    ZDNet Recommends

    According to Microsoft, attacks from state-sponsored Iranian hackers on IT services firms were virtually non-existent in 2020, but this year exceeded 1,500 potential attacks. “Microsoft has observed multiple Iranian threat actors targeting the IT services sector in attacks that aim to steal sign-in credentials belonging to downstream customer networks to enable further attacks,” it said.See also: A winning strategy for cybersecurity (ZDNet special report).Most of the targeting is focused on IT services companies based in India, as well as several companies based in Israel and the United Arab Emirates. Microsoft said that these attacks are another example of how nation-state actors are increasingly targeting supply chains as an indirect approach to their real targets.”Until July 2021, Microsoft had observed relatively little history of Iranian actors attacking Indian targets,” Microsoft said in a blogpost from its Threat Intelligence Center (MSTIC) and Digital Security Unit (DSU).”Iranian threat actors are increasing attacks against IT services companies as a way to access their customers’ networks. This activity is notable because targeting third parties has the potential to exploit more sensitive organizations by taking advantage of trust and access in a supply chain.”

    It would seem Iranian hackers have learned lessons from successful software supply-chain hacks, such as the attack on SolarWinds, which targeted US federal agencies and key US cybersecurity firms, including Microsoft: the US and UK blamed that attack on Russia’s Foreign Intelligence Service. Microsoft says the Iranian attacks on IT services firms have trended upwards significantly in the past six months. “As India and other nations rise as major IT services hubs, more nation-state actors follow the supply chain to target these providers’ public and private sector customers around the world matching nation-state interests,” Microsoft noted. Microsoft said it issued 1,788 nation-state notifications about Iranian actors to enterprise customers in India from mid-August to late September, roughly 80% of which were to IT companies, up from just 10 notifications issued in the previous three years in response to previous Iranian targeting. “Iranian cyber actors have rarely targeted India, and the lack of pressing geopolitical issues that would have prompted such a shift suggests that this targeting is for indirect access to subsidiaries and clients outside India,” Microsoft said.Microsoft is tracking the emerging threat actor as DEV-0228. This week, Microsoft also highlighted Iran’s growing interest in using ransomware to disrupt targets and coordinate these attacks with physical operations. See also: Dark web crooks are now teaching courses on how to build botnets.The US, UK, and Australian governments subsequently urged admins to immediately patch Exchange email server and Fortinet VPN vulnerabilities. And last month, Microsoft warned that Iranian hackers were using password attacks against 250 Israeli and US organizations operating in the Persian Gulf. DEV-0228 used access to an IT company to extend compromise customers in the defense, energy, and legal sectors in Israel, according to Microsoft. “DEV-0228 dumped credentials from the on-premises network of an IT provider based in Israel in early July. Over the next two months, the group compromised at least a dozen other organizations, several of which have strong public relations with the compromised IT company,” it said.  More