Remove 2017 Remove Antivirus Remove Blog Remove System Administration
article thumbnail

A Closer Look at the Snatch Data Ransom Group

Krebs on Security

The government says Snatch used a customized ransomware variant notable for rebooting Microsoft Windows devices into Safe Mode — enabling the ransomware to circumvent detection by antivirus or endpoint protection — and then encrypting files when few services are running. Details after contacting on jabber: truniger@xmpp[.]jp.”

article thumbnail

How Did Authorities Identify the Alleged Lockbit Boss?

Krebs on Security

was used to register at least six domains, including a Russian business registered in Khoroshev’s name called tkaner.com , which is a blog about clothing and fabrics. 2011 said he was a system administrator and C++ coder. According to DomainTools.com , the address sitedev5@yandex.ru “P.S.

article thumbnail

Top Cybersecurity Accounts to Follow on Twitter

eSecurity Planet

Krebs wrote for The Washington Post between 1995 and 2009 before launching his current blog KrebsOnSecurity.com. ICYMI, Equifax forced to pull offline a huge database of consumer data guarded only by credentials "admin/admin" [link] — briankrebs (@briankrebs) September 13, 2017. Bruce Schneier | @schneierblog.