Remove 2011 Remove Malware Remove Ransomware Remove System Administration
article thumbnail

Stolen Nvidia certificates used to sign malware—here’s what to do

Malwarebytes

As we wrote on March 3, 2022 Nvidia, was recently attacked by the LAPSUS$ ransomware group. Those certificates are now being used to sign malware. As is often the case in ransomware attacks, the exfiltrated data was published on a leak site. The ensuing data leak included two of NVIDIA’s code signing certificates. Mitigation.

Malware 113
article thumbnail

Dissecting the malicious arsenal of the Makop ransomware gang

Security Affairs

Cyber security researcher Luca Mella analyzed the Makop ransomware employed in a recent intrusion. Executive summary Insights from a recent intrusion authored by Makop ransomware operators show persistence capability through dedicated.NET tools. Everything is freeware software maintained by Voidtools.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

How Did Authorities Identify the Alleged Lockbit Boss?

Krebs on Security

and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. 2011 said he was a system administrator and C++ coder. Last week, the United States joined the U.K. Financial sanctions levied against Khoroshev by the U.S. “P.S.

article thumbnail

Exclusive: Lighting the Exfiltration Infrastructure of a LockBit Affiliate (and more)

Security Affairs

Our investigation revealed that this remote endpoint is associated with criminal activities dating back to 2019, indicating that these hosts were likely under the control of the same technical administration. Introduction Digging into ransomware infections always provides valuable insights.

Scams 140
article thumbnail

Updates from the MaaS: new threats delivered through NullMixer

Security Affairs

A technical analysis of NullMixer malware operation revealed Italy and France are the favorite European countries from the attackers’ perspective. Executive Summary Our insights into a recent NullMixer malware operation revealed Italy and France are the favorite European countries from the opportunistic attackers’ perspective.

Malware 98