Security Affairs

MAY 27, 2020

Microsoft is warning organizations to deploy protections against a new strain of PonyFinal ransomware that has been in the wild over the past two months. PonyFinal is Java-based ransomware that is manually distributed by threat actors. PonyFinal is Java-based ransomware that is manually distributed by threat actors.

Ransomware 102

Ransomware Security Intelligence Encryption Advertising 102

Security Affairs

JANUARY 11, 2022

Another gang, Night Sky ransomware operation, started exploiting the Log4Shell vulnerability in the Log4j library to gain access to VMware Horizon systems. The Night Sky ransomware operation started exploiting the Log4Shell flaw (CVE-2021-44228) in the Log4j library to gain access to VMware Horizon systems.

Ransomware 94

Ransomware Hacking Internet Internet 94

Hot for Security

MAY 21, 2021

Security researchers have discovered a new massive spam email campaign designed to push the latest version of STRRAT malware, according to data shared by Microsoft. Ransomware attacks are among the most dangerous for people and companies alike. Attackers used compromised email accounts to launch the email campaign.

Ransomware 122

Ransomware Malware Security Intelligence Encryption 122

Hot for Security

MARCH 12, 2021

Ransomware operators are actively targeting unpatched Exchange instances in wake of the recently disclosed ProxyLogon Exchange Server flaws, according to reports. Phillip Misner, a Security Program Manager with Microsoft, tweeted earlier today that a new ransomware family is leveraging the latest-disclosed Exchange vulnerabilities.

Ransomware 141

Ransomware Education Security Intelligence Accountability 141

Security Affairs

OCTOBER 16, 2022

Microsoft warns that new Prestige ransomware is targeting transportation and logistics organizations in Ukraine and Poland. Microsoft reported that new Prestige ransomware is being used in attacks aimed at transportation and logistics organizations in Ukraine and Poland. ” continues the report.

Ransomware 82

Ransomware Encryption Backups Security Intelligence 82

Security Affairs

NOVEMBER 11, 2022

Microsoft linked Prestige ransomware attacks against organizations in Ukraine and Poland to Russia-linked threat actors. Microsoft has identified a new ransomware strain "Prestige" in limited targeted attacks in Ukraine and Poland. The campaign shares victimology with recent operations conducted by Russia-linked threat actors.

Ransomware 79

Ransomware Telecommunications DNS Hacking 79

SC Magazine

MARCH 12, 2021

The company confirmed a new family of ransomware being used after an initial compromise of unpatched on-premises Exchange Servers. Microsoft confirmed “a new family of ransomware being used after an initial compromise of unpatched on-premises Exchange Servers,” via its Security Intelligence Twitter account.

Ransomware 82

Ransomware Security Intelligence Media Accountability 82

Security Affairs

AUGUST 7, 2023

Senior official reports a quadruple increase in ransomware attacks against Finland since it started the process to join NATO. The number of ransomware attacks targeting Finland has increased fourfold since the country began the process of joining NATO in 2023. So I don’t believe there’s a single silver bullet.”

Ransomware 89

Ransomware Government Cyber threats Security Intelligence 89

Webroot

APRIL 21, 2021

Although cybercriminal activity throughout 2020 was as innovative as ever, some of the most noteworthy threat activity we saw came from the old familiar players, namely ransomware, business email compromise (BEC) and phishing. Ransomware. One of the newer trends we saw in ransomware was that of data extortion.

Threat Reports 103

Threat Reports Phishing Ransomware Backups 103

SC Magazine

JULY 2, 2021

Today’s columnist, Troy Wachter of Cyberint, says defeating ransomware groups like the one that hit Colonial Pipeline will take teamwork across departments and threat intelligence tools that show how and where specific threats have originated and how they are evolving. OrbitalJoe CreativeCommons CC BY-NC-ND 2.0.

Ransomware 59

Ransomware Engineering Encryption Insurance 59

Malwarebytes

APRIL 18, 2023

There’s a new ransomware gang in town, stitched together from members of well known threat creators to push a new kind of malware focused on punishing unwary organisations. The malware family, called “Domino”, is the brainchild of FIN7 and ex-Conti ransomware members. This current campaign is, sadly, no different.

Malware 87

Malware Banking Ransomware Passwords 87

Webroot

NOVEMBER 5, 2021

But despite the headlines, most ransomware targets families as well as small and medium sized businesses. Targeted by ransomware. Ransomware uses modern technology and cutting-edge tools to do something that feels decidedly old fashioned – steal from you. Ransomware tactics. Their goal is disruption.

Ransomware 81

Ransomware Backups Banking Technology 81

Malwarebytes

AUGUST 16, 2021

Last week on Malwarebytes Labs: Home routers are being hijacked using a vulnerability disclosed just 2 before Ransomware turncoat leaks Conti data, lifts the lid on the ransomware business Check your passwords! Stay safe, everyone!

Social Engineering 95

Social Engineering Scams VPN Phishing 95

Malwarebytes

JUNE 14, 2022

We urge customers to upgrade to the latest version or apply recommended mitigations: [link] — Microsoft Security Intelligence (@MsftSecIntel) June 11, 2022. AvosLocker Ransomware and Linux botnets are getting in on the action. A mixed bag of attacks. Has Windows & Linux versions.

Ransomware 69

Ransomware Scams Security Intelligence Encryption 69

Webroot

OCTOBER 1, 2021

There was the infrastructure ransomware attack on the Colonial Pipeline in May 2021, which caused the company to cease operations for days. Also the attack on JBS USA , which fell victim to ransomware and threatened U.S. Over the course of the last year, “SMBs continued to be the prime target of ransomware authors.

Ransomware 112

Ransomware Backups Threat Reports Small Business 112

Security Affairs

OCTOBER 10, 2020

The TA505 group was involved in campaigns aimed at distributing the Dridex banking Trojan, along with Locky , BitPaymer , Philadelphia , GlobeImposter , and Jaff ransomware families. Security experts from cyber-security firm Prevailion reported that TA505 has compromised more than 1,000 organizations. states Microsoft.

Cybercrime 110

Cybercrime Security Intelligence Authentication Banking 110

NopSec

SEPTEMBER 12, 2016

Businesses, governments, and consumers alike need to be aware of ransomware – a type of malware that can inflict serious damage on your finances and productivity in a very short span of time. In earlier days, ransomware programs would simply lock a computer’s screen and prevent programs and files from being opened.

Risk 40

Risk Ransomware Social Engineering Penetration Testing 40

Webroot

JANUARY 7, 2022

“In 2022, the widespread growth of mobile access will increase the prevalence of mobile malware, given all of the behavior tracking capabilities,” says Grayson Milbourne, security intelligence director, Carbonite + Webroot, OpenText companies. Ransomware. Earlier in 2021, we detailed the hidden costs of ransomware in our eBook.

Cybercrime 105

Cybercrime Phishing Ransomware Cryptocurrency 105

Webroot

JUNE 2, 2022

According to the latest 2022 BrightCloud® Threat Report , small to medium-sized businesses (SMBs) are particularly vulnerable to becoming a victim of a ransomware attack. Without human security experts and solutions at their disposable, these businesses remain susceptible to attacks.

Threat Detection 101

Threat Detection Cyber Insurance Small Business Insurance 101

Security Affairs

SEPTEMBER 20, 2022

This week, VMware and Microsoft warned of an ongoing, widespread Chromeloader malware campaign that is dropping malicious browser extensions, node-WebKit malware, and ransomware. pic.twitter.com/v6sexKgDSg — Microsoft Security Intelligence (@MsftSecIntel) September 16, 2022.

Malware 98

Malware Adware Ransomware Security Intelligence 98

eSecurity Planet

OCTOBER 4, 2021

percent of all malware detected on networks of WatchGuard Technologies customers in the second quarter came over encrypted connections, raising the security risk for the 80 percent of such organizations that lack processes for decrypting and scanning HTTPS traffic for threats. PowerShell, Ransomware Threats Grow. A surprising 91.5

Encryption 145

Encryption Malware Ransomware Firewall 145

Security Affairs

FEBRUARY 2, 2020

pic.twitter.com/mcRyEBUmQH — Microsoft Security Intelligence (@MsftSecIntel) January 30, 2020. The TA505 group was involved in campaigns aimed at distributing the Dridex banking Trojan, along with Locky , BitPaymer , Philadelphia , GlobeImposter , and Jaff ransomware families. based electrical company, a U.S.

Malware 72

Malware Security Intelligence Banking Phishing 72

Security Affairs

NOVEMBER 17, 2021

Learn more from this blog summarizing these trends, as presented at #CyberWarCon : [link] — Microsoft Security Intelligence (@MsftSecIntel) November 16, 2021. The analysis focuses on six Iranian hacking groups that are increasingly utilizing ransomware to either fundraise or disrupt the computer networks of the targets.

VPN 97

VPN Social Engineering Accountability Media 97

Security Affairs

JANUARY 19, 2022

We reported our discovery to SolarWinds, and security updates have been released. More info: [link] — Microsoft Security Intelligence (@MsftSecIntel) January 19, 2022. In the past, other threat actors exploited Serv-U vulnerabilities to carry out malicious activities.

Authentication 97

Authentication Hacking Ransomware Security Intelligence 97

Security Affairs

JANUARY 26, 2022

VMware urges customers to patch critical Log4j security vulnerabilities impacting Internet-exposed VMware Horizon servers targeted in ongoing attacks. This month, the Night Sky ransomware operation started exploiting the Log4Shell flaw (CVE-2021-44228) in the Log4j library to gain access to VMware Horizon systems.

Internet 91

Internet Internet Ransomware Hacking 91

Malwarebytes

JULY 5, 2021

Other cybersecurity news. Stay safe, everyone!

Cyber Insurance 97

Cyber Insurance Social Engineering Scams Insurance 97

Security Affairs

SEPTEMBER 24, 2020

pic.twitter.com/POppQ51uMX — Microsoft Security Intelligence (@MsftSecIntel) September 22, 2020. Emotet malware is also used to deliver other malicious code, such as Trickbot and QBot trojan or ransomware such as Conti (TrickBot) or ProLock (QBot). Additional malware is downloaded and installed when running these macros.

Malware 118

Malware Passwords Advertising Cybercrime 118

Security Affairs

OCTOBER 31, 2020

The infamous banking trojan is also used to deliver other malicious code, such as Trickbot and QBot trojan or ransomware such as Conti (TrickBot) or ProLock (QBot). Researchers from Microsoft Security Intelligence are also warning of the ongoing Halloween-themed Emotet campaign. since August. Enable Edition template mostly used.

Banking 105

Banking Malware Security Intelligence Advertising 105

Security Affairs

MARCH 12, 2021

Microsoft researchers also spotted a ransomware gangs that is exploiting ProxyLogon flaws to spread a piece of malware tracked as DearCry. We have detected and are now blocking a new family of ransomware being used after an initial compromise of unpatched on-premises Exchange Servers. and also as DearCry. and also as DearCry.

Cyber Attacks 116

Cyber Attacks Cybercrime Authentication Hacking 116

Security Affairs

OCTOBER 6, 2020

The infamous banking trojan is also used to deliver other malicious code, such as Trickbot and QBot trojan or ransomware such as Conti (TrickBot) or ProLock (QBot). pic.twitter.com/POppQ51uMX — Microsoft Security Intelligence (@MsftSecIntel) September 22, 2020.

Government 132

Government Banking Advertising Malware 132

Security Affairs

APRIL 18, 2020

pic.twitter.com/V2JcZg2kjt — Microsoft Security Intelligence (@MsftSecIntel) April 17, 2020. Then the attackers attempt to monetize their efforts by deploying other payloads, like the Ryuk Ransomware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Malware 110

Malware Advertising Security Intelligence Phishing 110

The Last Watchdog

MAY 1, 2019

Lucy’s’s software allows companies to easily set-up customizable mock attacks to test employees’ readiness to avoid phishing, ransomware and other attacks with a social engineering component. This is stunning: phishing attacks soared in 2018, rising 250% between January and December, according to Microsoft’s Security Intelligence Report.

Social Engineering 166

Social Engineering Engineering Phishing Banking 166

SiteLock

AUGUST 27, 2021

Microsoft’s “ Security Intelligence Report, Volume 24 ” shows a 250% increase in the number of phishing emails and attacks since 2018. The primary intention of a phishing email is to carry out a ransomware attack or compromise your network, leaving businesses susceptible to further damage and costs.

Phishing 98

Phishing Passwords Education Password Management 98

Daniel Miessler

NOVEMBER 6, 2020

This gap between need and skilled people is even more acute due to the rise of the ransomware threat , and the world is going to have to respond with more people who can at least do the basics, even if that’s through short certification programs. ESG and ISSA. I think we need a national program to address this.

InfoSec 255

InfoSec Insurance Artificial Intelligence Cybersecurity 255

Security Affairs

OCTOBER 12, 2020

link] — Microsoft Security Intelligence (@MsftSecIntel) October 12, 2020. The Trickbot infrastructure was used by crooks to compromise systems and carry out human-operated campaigns, notably its use for the deployment of the Ryuk ransomware. ” reads the post published by Microsoft.

Banking 95

Banking Malware Advertising Financial Services 95

Thales Cloud Protection & Licensing

OCTOBER 4, 2021

These guidelines will help banks recover and restore critical data to facilitate the resumption of critical functions, services, and systems in a timely manner in the event of destructive cyber-attacks, such as ransomware attacks.

Banking 114

Banking Digital transformation Encryption Backups 114

CyberSecurity Insiders

OCTOBER 19, 2021

AT&T Managed XDR brings broad visibility into your environment through its ability to integrate across many security tools with AlienApps. These connections into your environment pull events and security intelligence into one centralized hub for further correlation and add context so you can respond to threats faster.

Threat Detection 101

Threat Detection Technology Antivirus Cybercrime 101