article thumbnail

Experts linked ransomware attacks to China-linked APT27

Security Affairs

Researchers from security firms Profero and Security Joes linked a series of ransomware attacks to the China-linked APT27 group. Security researchers from security firms Profero and Security Joes investigated a series of ransomware attacks against multiple organizations and linked them to China-linked APT groups.

article thumbnail

Lazarus Group North Korea strikes South Korean software firm

CyberSecurity Insiders

Cybersecurity Insiders have learnt that the said group of threat actors have launched a MATA malware attack on the servers of the software company to steal information from the database and encrypt it with ransomware until their demands are met.

Software 105
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Satan Ransomware adds new exploits to its arsenal

Security Affairs

A variant of the Satan ransomware recently observed includes exploits to its arsenal and targets machines leveraging additional flaws. Experts at FortiGuard Labs have discovered a new variant of the Satan ransomware that includes new exploits to its portfolio and leverages additional vulnerabilities to infect as many machines as possible.

article thumbnail

How Did Authorities Identify the Alleged Lockbit Boss?

Krebs on Security

and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. According to Constella, this email address was used in 2010 to register an account for a Dmitry Yurievich Khoroshev from Voronezh, Russia at the hosting provider firstvds.ru.

article thumbnail

What Is Cloud Workload Protection? Ultimate Guide

eSecurity Planet

As cloud computing upends traditional perimeter models of cybersecurity, new cloud security models have emerged, and CWPP was one of the first to appear back in 2010. It should include encryption , DLP , and access management to prevent unauthorized access, exfiltration, or leaking.

article thumbnail

Key aerospace player Safran Group leaks sensitive data

Security Affairs

It is crucial to ensure that leaked keys are in longer bit-lengths and encoded using secure encryption/hashing algorithms. The unidentified hackers allegedly attempted to map the company’s computer system between 2009 and 2010. In 2018, Safran is believed to have suffered a cyberattack on its internal network.

article thumbnail

Ramnit is back and contributes in creating a massive proxy botnet, tracked as ‘Black’ botnet

Security Affairs

Ramnit is one of the most popular banking malware families in existence today, it was first spotted in 2010 as a worm, in 2011, its authors improved it starting from the leaked Zeus source code turning the malware into a banking Trojan. DDoS attacks, ransomware-based campaigns, cryptocurrency mining campaigns).

Malware 47