Security Affairs

JUNE 12, 2022

Ransomware gangs are actively exploiting CVE-2022-26134 remote code execution (RCE) flaw in Atlassian Confluence Server and Data Center. Multiple ransomware groups are actively exploiting the recently disclosed remote code execution (RCE) vulnerability, tracked as CVE-2022-26134 , affecting Atlassian Confluence Server and Data Center.

Ransomware 136

Ransomware Encryption Malware Hacking 136

Security Affairs

JUNE 7, 2022

The QBot malware operation has partnered with Black Basta ransomware group to target organizations worldwide. Researchers from NCC Group spotted a new partnership in the threat landscape between the Black Basta ransomware group and the QBot malware operation. SecurityAffairs – hacking, Black Basta ransomware).

Ransomware 143

Ransomware Backups Malware Firewall 143

Security Affairs

MAY 31, 2022

Cyber Research Labs reported a rise in ransomware attacks in the second quarter of 2022, small states are more exposed to these attacks. The experts warn of ransomware attacks against government organizations. They observed a total of 48 government organizations from 21 countries that were hit by 13 ransomware attacks in 2022.

Government 143

Government Ransomware Cybercrime Banking 143

Security Affairs

JUNE 7, 2022

Mandiant researchers associate multiple LockBit ransomware attacks with the notorious Evil Corp Cybercrime Group. Mandiant researchers have investigated multiple LOCKBIT ransomware attacks that have been attributed to the financially motivated threat actor UNC2165. Previously, the UNC2165 actors also deployed the HADES ransomware.

Ransomware 136

Ransomware Cybercrime Malware Hacking 136

Security Affairs

JUNE 2, 2022

LockBit ransomware gang claimed responsibility for an attack against the electronics manufacturing giant Foxconn that impacted production in Mexico. The electronics manufacturing giant Foxconn confirmed that its production plant in Tijuana (Mexico) has been impacted by a ransomware attack in late May. Pierluigi Paganini.

Ransomware 101

Ransomware Manufacturing Cybersecurity Hacking 101

Security Affairs

MAY 28, 2022

The recently launched Industrial Spy data extortion marketplace has now started its ransomware operation. Some data dumps are available on Industrial Spy for free, they were likely downloaded from the leak sites of ransomware gangs or other hacking forums. SecurityAffairs – hacking, ransomware). ” states BleepingComputer.

Ransomware 133

Ransomware Malware Hacking Accountability 133

Security Affairs

JUNE 10, 2022

The Cuba ransomware operators are back and employed a new version of its malware in recent attacks. Cuba ransomware has been active since at least January 2020. The ransomware encrypts files on the targeted systems using the “.cuba” The ransomware encrypts files on the targeted systems using the “.cuba” cuba” extension.

Ransomware 129

Ransomware Malware Encryption Hacking 129

Security Affairs

MAY 30, 2022

Researchers discovered a new ransomware family called GoodWill that asks victims to donate the ransom for social causes. CloudSEK ’s Threat Intelligence Research team has disclosed a new ransomware strain called GoodWill, that demands victims the payment of a ransom through donations for social causes and financially helping people in need.

Ransomware 111

Ransomware Media Hacking Cybersecurity 111

eSecurity Planet

JANUARY 11, 2024

These devices exist outside of direct corporate management and provide a ransomware gang with unchecked platforms for encrypting data. Ransomware remains just one of many different threats and as security teams eliminate key vectors of attack, adversaries will shift tactics. How does remote encryption work?

Ransomware 106

Ransomware Encryption IoT VPN 106

Security Affairs

JUNE 16, 2022

The BlackCat ransomware gang is targeting unpatched Exchange servers to compromise target networks, Microsoft warns. Microsoft researchers have observed BlackCat ransomware gang targeting unpatched Exchange servers to compromise organizations worldwide.

Ransomware 109

Ransomware Cybercrime Malware Advertising 109

Security Affairs

JUNE 16, 2022

ALPHV/BlackCat ransomware group began publishing victims’ data on the clear web to increase the pressure on them and force them to pay the ransom. ALPHV/BlackCat ransomware group has adopted a new strategy to force victims into paying the ransom, the gang began publishing victims’ data on the clear web to increase the pressure.

Ransomware 92

Ransomware Cybercrime Malware Advertising 92

Security Affairs

JUNE 13, 2022

Experts observed the HelloXD ransomware deploying a backdoor to facilitate persistent remote access to infected hosts. The HelloXD ransomware first appeared in the threat landscape on November 30, 2021, it borrows the code from Babuk ransomware , which is available in Russian-speaking hacking forums since September 2021.

Ransomware 93

Ransomware Malware Hacking Cybersecurity 93

Webroot

AUGUST 10, 2021

The issue at the heart of ransomware insurance will be familiar to most parents of young children: rewarding bad behavior only invites more of the same, so it’s generally not a good idea. But critics of the ransomware insurance industry argue that’s exactly what the practice does. So, if U.S.-based So far, few have.

Insurance 121

Insurance Ransomware Cybersecurity Cyber Insurance 121

Security Affairs

JUNE 19, 2022

Experts warn of a new ech0raix ransomware campaign targeting QNAP Network Attached Storage (NAS) devices. Bleeping Computer and MalwareHunterTeam researchers, citing user reports and sample submissions on the ID Ransomware platform, warn of a new wave of ech0raix ransomware attacks targeting QNAP Network Attached Storage (NAS) devices.

Ransomware 97

Ransomware Encryption Internet Internet 97

Security Affairs

JUNE 10, 2022

The Vice Society group has claimed responsibility for the ransomware attack that hit the Italian city of Palermo forcing the IT admins to shut down its infrastructure. The Vice Society ransomware group has claimed responsibility for the recent cyber attack that hit the city of Palermo in the South of Italy.

Ransomware 115

Ransomware Data breaches Cyber Attacks Surveillance 115

Security Affairs

MAY 31, 2022

Costa Rican Social Security Fund, Costa Rica ‘s public health service, was hit by a Hive ransomware attack. Costa Rican Social Security Fund, Costa Rica ‘s public health service (aka CCCS), was hit today by a Hive ransomware attack, BleepingComputer reported. The attack occurred early this morning, Tuesday, May 31, 2022.

Ransomware 101

Ransomware Government Telecommunications Hacking 101

SecureWorld News

MARCH 21, 2023

Ransomware has gone through several game-changing milestones over the course of its decade-long evolution. Two years later, a sketchy affiliate model called Ransomware-as-a-Service (RaaS) made its debut, thereby lowering the entry bar for wannabe threat actors. For instance, the felons hit the D.C.

Ransomware 78

Ransomware Encryption Adware Data breaches 78

Security Affairs

JUNE 12, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). Every week the best security articles from Security Affairs for free in your email box. Pierluigi Paganini.

Ransomware 123

Ransomware DNS Cybercrime Hacking 123

Cisco Security

MARCH 23, 2021

In our Threat Trends blog series , we attempt to provide insight into the prevalent trends on the threat landscape. For example, those in the financial services industry may see more activity around information stealers; others in manufacturing may be more likely to encounter ransomware. Part 2: Industry trends.

DNS 123

DNS Financial Services Healthcare Manufacturing 123

eSecurity Planet

AUGUST 12, 2021

Accenture officials are saying they staved off a ransomware attack this week by a cybercriminal ring using the LockBit malware even as the hacker group claimed to have captured data from the massive global IT and business consulting firm and has threatened to release it. Further reading: How Zero Trust Security Can Protect Against Ransomware.

Ransomware 91

Ransomware Backups Cybercrime Artificial Intelligence 91

CyberSecurity Insiders

JUNE 30, 2021

This means that the entire roster of (ISC)² certifications are now required for different security workforce categories within the Department, depending on the functional area the role covers. The HCISPP has been approved for the following categories: Information Assurance Manager Level 1 (IAM 1). IAM Level II (IAM II).

Cybersecurity 122

Cybersecurity Healthcare Engineering Government 122

Cisco Security

MARCH 11, 2021

Part 1: Top threat categories. Our Threat Trends blog series takes a look at the activity that we see in the threat landscape and reports on those trends. We’ll look at DNS queries to domains that fall into certain categories of malicious activity, and in some cases specific threats, between January and December of 2020.

DNS 138

DNS Phishing Ransomware Internet 138

Security Affairs

JUNE 5, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”) To nominate, please visit:? Million Alert! Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Spyware 102

Spyware Firmware Ransomware Scams 102

Digital Shadows

JANUARY 18, 2023

Ransomware activity stayed at steady levels throughout 2022’s fourth quarter (Q4 2022). Since we bid farewell to ever-present groups like Conti, the world of ransomware has remained a game of whack-a-mole: For every group that disappears, there are always several waiting in the shadows to replace it. The 707 tippers mark a 6.5%

Ransomware 40

Ransomware Accountability Healthcare Data breaches 40

CyberSecurity Insiders

MARCH 13, 2021

This blog was written by an independent guest blogger. Among these categories, the following were deemed the highest risk: Audio/video impersonation. Considering that ransomware claims a new victim every 14 seconds, we decided to explore the topic of deepfake ransomware. Tailored phishing. Disrupting AI-based systems.

Cybercrime 103

Cybercrime Technology Ransomware Phishing 103

The Last Watchdog

JUNE 20, 2022

Related: ‘IABs’ spread ransomware. Planning your roadmap, executing your projects, and keeping an eye on the barrage of ransomware headlines, it’s understandable if you and your team are feeling some anxiety. Data collections released after ransomware attacks. Databases with critical IP and/or PII.

Ransomware 232

Ransomware Marketing Data collection VPN 232

Security Boulevard

AUGUST 25, 2021

Throughout this blog series, I have examined real-world ICS cyber-related incidents as a way of looking back to predict what the next attack may look like. The three categories of attacker that I have considered so far are disgruntled insiders, ransomware groups, and APT.

Ransomware 57

Ransomware Cyber Attacks 57

Webroot

OCTOBER 13, 2021

These days, every major ransomware campaign runs a “double extortion” method, a scary prospect for small businesses. While the list below may define payloads into different categories of malware, note that many of these bad actor groups contract work from others. How malware disrupted our lives. This year’s wicked winners.

Malware 145

Malware Small Business Antivirus Backups 145

Security Affairs

JUNE 20, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). I ask you to vote for me again (even if you have already done it), because this vote is for the final.

Spyware 77

Spyware DNS Surveillance Ransomware 77

SecureWorld News

SEPTEMBER 10, 2020

Coalition, a cyber insurance company, recently released a report detailing the categories of cyber attacks as well as the cause behind the attacks for the first half of 2020. The number one type of cyber incident so far this year is ransomware. The company says that ransomware accounted for 41% of cyber claims.

Cyber Insurance 54

Cyber Insurance Insurance Ransomware Cyber Attacks 54

Security Affairs

MAY 27, 2022

Crooks obtain the information by conducting spear-phishing and ransomware attacks, or other means. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”).

Cybercrime 137

Cybercrime Education Accountability Phishing 137

Security Affairs

MAY 29, 2022

Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). If you want to also receive for free the newsletter with the international press subscribe here.

InfoSec 108

InfoSec Spyware DDOS Firewall 108

Security Affairs

JUNE 17, 2022

“Proofpoint has discovered a potentially dangerous piece of functionality in Office 365 or Microsoft 365 that allows ransomware to encrypt files stored on SharePoint and OneDrive in a way that makes them unrecoverable without dedicated backups or a decryption key from the attacker.” ” reads the post published by Proofpoint.

Encryption 97

Encryption Backups Ransomware Accountability 97

Security Affairs

JUNE 2, 2022

The analysis of the internal chats of the Conti ransomware group revealed the gang was working on firmware attack techniques. The analysis of Conti group’s chats , which were leaked earlier this year, revealed that the ransomware gang has been working on firmware attack techniques. Pierluigi Paganini.

Firmware 102

Firmware Engineering Ransomware Malware 102

Security Affairs

DECEMBER 21, 2021

Uptycs researchers have observed attacks related to miners, DDOS malware and some variants of ransomware actively leveraging LogforShell flaw in log4j. So far we have observed attacks related to coinminers, DDOS malware and some variants of ransomware actively leveraging this vulnerability. Linux Ransomware. Coinminers.

DDOS 97

DDOS Malware Ransomware Cryptocurrency 97

Security Boulevard

JANUARY 10, 2022

As Picus, we published a detailed blog post about the Tactics, Techniques, and Procedures (TTPs) used by HAFNIUM to target Microsoft Exchange Servers. DarkSide Ransomware Campaign. The DarkSide ransomware group provided Ransomware as a Service (RaaS) to other threat actors. Remote Code Execution. CVE-2021-27065.

Cyber threats 141

Cyber threats Ransomware Risk Architecture 141

Cisco Security

MARCH 11, 2021

Our Threat Trends blog series takes a look at the activity that we see in the threat landscape and reports on those trends. We’ll look at DNS queries to domains that fall into certain categories of malicious activity, and in some cases specific threats, between January and December of 2020. Organizations and malicious DNS activity.

DNS 61

DNS Phishing Ransomware Internet 61