Security Affairs

OCTOBER 26, 2019

Even though encryption should be taken seriously by businesses of all sizes, only a small fraction of the corporate sector puts their back on it. According to Juniper Research , up to 13% of the cybercrime market thrives because of the small business. Why is Encryption a Feasible Option against Digital Threats? Final Thoughts.

Encryption 46

Encryption Cyber threats Ransomware Cybercrime 46

Security Affairs

JANUARY 5, 2020

DeathRansom was considered fake ransomware due to the fact that it did not implement an effective encryption process, but now things are changing. DeathRansom is a ransomware family that was initially classified as a joke because it did not implement an effective encryption scheme. Pierluigi Paganini.

Encryption 65

Encryption Ransomware Malware Scams 65

Security Affairs

OCTOBER 31, 2020

The REvil ransomware gang (aka Sodinokibi) claims to have stolen info from the systems at the company before encrypting them. The cybercrime gang published some screenshots showing directories and files from the systems of the breached company. “Absolutely all servers and working computers of the company are hacked and encrypted.

Hacking 128

Hacking Ransomware Advertising Encryption 128

Security Affairs

NOVEMBER 1, 2020

The Maze cybercrime gang is shutting down its operations, it was considered one of the most prominent and active ransomware crew since it began operating in May 2019. The gang was the first to introduce a double-extortion model in the cybercrime landscape at the end of 2019. Pierluigi Paganini. SecurityAffairs – hacking, Maze).

Ransomware 142

Ransomware Cybercrime Advertising Software 142

Security Affairs

DECEMBER 2, 2019

The malicious code executes a small program, just before starting the encryption process, to disable security tools running on the infected systems that could detect its operations. These are encrypted under the suffix. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 116

Ransomware Encryption Advertising Cybercrime 116

Security Affairs

OCTOBER 20, 2018

The developers of the GandCrab ransomware have released the decryption keys for all Syrian victims in an underground cybercrime forum. The authors of the infamous GandCrab ransomware have released the decryption keys for all Syrian victims in an underground cybercrime forum. Security Affairs – GandCrab ransomware, cybercrime ).

Ransomware 91

Ransomware Cybercrime Identity Theft Advertising 91

The Last Watchdog

JUNE 21, 2020

Although most people think of ransomware as a dodgy application that encrypts data and holds it for ransom, the concept is much more heterogeneous than that. File encryption 2013 – 2015. It emerged in September 2013 and paved the way for hundreds of file-encrypting menaces that have splashed onto the scene ever since.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

NOVEMBER 4, 2020

. “On July 28, 2020, Mattel discovered that it was the victim of a ransomware attack on its information technology systems that caused data on a number of systems to be encrypted. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 112

Ransomware Retail Advertising Malware 112

Security Affairs

SEPTEMBER 2, 2020

Researchers from Malwarebytes reported that Magecart groups are using the encrypted messaging service Telegram to exfiltrate stolen payment details from compromised websites. Attackers encrypt payment data to make identification more difficult before transferring it via Telegram’s API into a chat channel. ” concluded the post.

Encryption 102

Encryption Advertising Cybercrime Marketing 102

Security Affairs

OCTOBER 2, 2018

GandCrab operates like a classic ransomware, it encrypts all user files and drops some ransom notes on the infected machine. to allow the code to encrypt the files opened by these applications. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Securi ty Affairs – ransomare, cybercrime).

Ransomware 91

Ransomware Encryption Advertising Malware 91

Krebs on Security

DECEMBER 8, 2022

First spotted in mid-August 2022 , Venus is known for hacking into victims’ publicly-exposed Remote Desktop services to encrypt Windows devices. Encrypting sensitive data wherever possible. Department of Health and Human Services (HHS) warned that Venus ransomware attacks were targeting a number of U.S. healthcare organizations.

Healthcare 257

Healthcare Backups Ransomware Insurance 257

Security Affairs

JUNE 28, 2020

If you use the legacy email and password login, your passwords are encrypted, but we highly encourage that you change it. ” The Korean Hackers group recently hacked Indian video on demand giant ZEE5 attackers and threatened to sell the database on the cybercrime underground markets. Pierluigi Paganini.

Media 142

Media Hacking Passwords Data breaches 142

Security Affairs

JULY 28, 2020

The activity of the Lazarus Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. The group has been linked to several major cyber attacks, including the 2014 Sony Pictures hack , several SWIFT banking attacks since 2016, and the 2017 WannaCry ransomware infection.

Ransomware 100

Ransomware Malware Advertising VPN 100

Security Affairs

OCTOBER 11, 2020

The actors behind FONIX RaaS advertised several products on various cybercrime forums. “Notably, FONIX varies somewhat from many other current RaaS offerings in that it employs four methods of encryption for each file and has an overly-complex post-infection engagement cycle.” ” concludes the report.

Ransomware 87

Ransomware Encryption Advertising DDOS 87

Security Affairs

MAY 27, 2020

Human-operated ransomware is a technique usually employed in nation-state attacks that is becoming very popular in the cybercrime ecosystem. The PonyFinal ransomware usually adds the “ enc” extension to the names of the encrypted files, it drops a ransom note (named README_files.txt) on the infected systems.

Ransomware 104

Ransomware Security Intelligence Encryption Advertising 104

Security Affairs

MAY 22, 2019

Security experts at Emsisoft released a new decrypted in a few days, it could be used for free by victims of the GetCrypt ransomware to decrypt their files encrypted by the malware. The GetCrypt ransomware is served through the RIG exploit kit , it leveragesSalsa20 and RSA-4096 to encrypt the victims’ files. Pierluigi Paganini.

Ransomware 76

Ransomware Encryption Advertising Cybercrime 76

Security Affairs

MARCH 19, 2020

” According to the experts, the first infections were observed in late 2019, victims reported their files were encrypted by a strain of malware. locked to the filename of the encrypted files. “On one of the compromised information systems, experts found encrypted files with the extension “ newversion.”

Government 107

Government Ransomware Encryption Penetration Testing 107

Security Affairs

MARCH 16, 2020

The security breach exposed name, email addresses, encrypted/hashed passwords, IP addresses, App IDs (32-character strings used to make requests to our service) associated with users’ accounts, personal and/or business names and addresses for some users, country of residence (if provided, website address (if provided).

Data breaches 106

Data breaches Passwords Advertising Accountability 106

Security Affairs

JANUARY 15, 2020

The cybercrime group behind Satan ransomware and other malware seems to be involved in the development of a new threat named 5ss5c. ru ) to the file name of each encrypted file, for example test.txt becomes [5ss5c@mail.ru ] test. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. dll –TargetIp.

Ransomware 70

Ransomware Cybercrime Architecture Advertising 70

Security Affairs

JULY 27, 2019

The website includes 89 decryptors that could allow decrypting for free files encrypted by 109 pieces of malware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – ransomware, cybercrime).

Advertising 72

Advertising Ransomware Cybercrime Encryption 72

Security Affairs

DECEMBER 19, 2019

The victims of the Maze Ransomware are facing another risk, after having their data encrypted now crooks are threatening to publish their data online. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 72

Ransomware Cybercrime Advertising Malware 72

Security Affairs

APRIL 27, 2020

The cybercrime gang also apologized for the damages they have caused their victims. Shade was considered one of the most dangerous threats in the cyber crime scenario, it has been active at least since 2014 when a massive infection was observed in Russian. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 121

Ransomware Advertising Antivirus Education 121

Security Affairs

APRIL 14, 2020

Once executed, the ransomware binary contacts the C2 server to download an image that serves as the main ransomware infection notification displayed the victim’s device, then it gathers the host details and transmits it to the C2 to create a custom key to encrypt the files on the system’s desktop with a “ locked20” extension.

Healthcare 116

Healthcare Ransomware Phishing Government 116

Security Affairs

MARCH 29, 2020

.” reads the post published by “This, in turn, would result in the broader proliferation among multiple cybercrime groups, and an eventual surge in attacks.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 110

Ransomware Hacking Advertising Malware 110

Security Affairs

NOVEMBER 5, 2020

The technique was already employed by other Chinese APT groups since 2013, later it was also adopted by other cybercrime gangs in attacks in the wild. The attackers use a simple XOR encryption algorithm with the string “Hapenexx is very bad” as a key. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Encryption 109

Encryption Malware Advertising Antivirus 109

Security Affairs

MARCH 10, 2020

Microsoft is warning of human-operated ransomware, this kind of attack against businesses is becoming popular in the cybercrime ecosystem. Human-operated ransomware is a technique usually employed in nation-state attacks that is becoming very popular in the cybercrime ecosystem. Pierluigi Paganini.

Ransomware 117

Ransomware Cybercrime Social Engineering Banking 117

Security Affairs

AUGUST 12, 2019

Researchers discovered a dump containing 6,840,339 records associated with StockX user accounts that surfaced in the cybercrime underground. A threat actor stole details of 6 million users, the stolen data includes user names, email addresses, addresses, shoe size, purchase history, and encrypted passwords (salted MD5).

Accountability 82

Accountability Data breaches Passwords Cybercrime 82

Security Affairs

JUNE 29, 2020

million to cybercriminals to recover data encrypted during a ransomware attack that took place on June 1. While we stopped the attack as it was occurring, the actors launched malware that encrypted a limited number of servers within the School of Medicine, making them temporarily inaccessible,” reads a statement published by the UCSF.

Ransomware 128

Ransomware Encryption Advertising Malware 128

Security Affairs

APRIL 9, 2020

million ransom to decrypt its files after being encrypted by the infamous Sodinokibi ransomware. “As part of this attack, the operators behind the Sodinokibi ransomware told BleepingComputer that they had encrypted the company’s entire network, deleted backup files, and copied more than 5GB of personal data.

Ransomware 117

Ransomware Encryption Advertising Backups 117

Security Affairs

JULY 26, 2020

The company is also aware that a threat actor is attempting to sell the Dave user records in the cybercrime underground, it hired security firm CrowdStrike to investigate the security breach. Unfortunately for some users, leaked data also includes encrypted payment card data and Social Security numbers. ” continues Cyble.

Banking 118

Banking Advertising Education Cybercrime 118

Security Affairs

JULY 23, 2020

The Windows version of MATA is composed of a loader used to load an encrypted next-stage payload and the orchestrator module (“lsass.exe”). The activity of the Lazarus Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. ” concludes the report.

Malware 100

Malware Ransomware Advertising Encryption 100

Security Affairs

DECEMBER 24, 2019

Feds remind that both ransomware implements a secure encryption algorithm that means it impossible to decrypt the files without paying the ransom. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 62

Ransomware Backups Encryption Cyber Attacks 62

Security Affairs

DECEMBER 4, 2018

To avoid detection, author of the threat signed the code with a trusted digital certificate issued form from Tencent Technologies and avoid encrypting data in some specific directories, like “Tencent Games, League of Legends, tmp, rtl, and program. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 92

Ransomware Encryption Advertising Software 92

Security Affairs

OCTOBER 24, 2020

The ransomware encrypted files and renamed their filenames by adding the “ easy2lock” extension, this extension was previously associated with recent WastedLocker ransomware infections. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 87

Ransomware Telecommunications Banking Advertising 87

Security Affairs

MAY 1, 2020

The hackers claim to have compromised the Banco BCR’s network in August 2019, and had the opportunity to exfiltrate its information before encrypting the files. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 135

Ransomware Banking Cyber Insurance Advertising 135

Security Affairs

FEBRUARY 9, 2020

It is unclear if the attackers have exfiltrated data from the systems before encrypting them. The attacker focused on encrypting data files in the Windows domain. According to security experts at Fox-IT, the ransomware attack is compatible with other attacks carried out by the TA505 cybercrime gang. Pierluigi Paganini.

Ransomware 108

Ransomware Cyber Attacks Architecture Backups 108

Security Affairs

APRIL 19, 2020

. “It is possible that an attack was conducted but failed to encrypt any devices.” ” Data Breach Notification service UnderTheBreach noticed that on April 11, an operator in the cybercrime underground offered for sale the access to a big enterprise, they speculate the big organizations could be Cognizant.

Ransomware 103

Ransomware Advertising Data breaches Cybercrime 103