SecureList

MAY 27, 2022

An intelligence team later discovered that HermeticRansom only superficially encrypts files, and ones encrypted by the ransomware can be decrypted. RUransom malware was discovered in March, which was created to encrypt files on computers in Russia. IoT attacks. IoT threat statistics.

Mobile 97

Mobile Adware Ransomware Malware 97

SecureList

MAY 31, 2021

For example, before making the first internet connection to its C2s, the Sunburst malware lies dormant for up to two weeks, preventing easy detection of this behaviour in sandboxes. Ransomware encrypting virtual hard disks. Most of the malware families used in the campaign are fileless malware and have not been seen before.

Malware 94

Malware Adware Encryption Architecture 94

SecureList

AUGUST 15, 2022

This might have been a test build, as the sample did not encrypt any files, but these events may herald the impending return of REvil. Kaspersky researchers found a way to recover files encrypted by the Yanluowang ransomware and released a decryptor for all victims. was the most common adware encountered in these three countries.

Mobile 61

Mobile Adware Malware Ransomware 61

SecureList

JUNE 7, 2023

Most prolific groups This section looks at ransomware groups that engage in so-called “double extortion”, that is stealing confidential data in addition to encrypting it. CVE-2017-0199 that allows using MS Office to load malicious scripts. CVE-2017-8570 that allows loading malicious HTA scripts into the system.

Mobile 64

Mobile Ransomware Malware Adware 64

SecureList

NOVEMBER 18, 2022

The former threatened files accessible from the internet over SMB protocol and protected by a weak account password. Threats that target NAS remain prominent, so we recommend keeping these devices inaccessible from the internet to ensure maximum safety of your data. Vulnerability statistics. AdWare.OSX.Amc.e, Bangladesh.

Mobile 84

Mobile Malware Ransomware IoT 84

SecureList

NOVEMBER 26, 2021

The way individual Microsoft Office vulnerabilities are ranked by the number of detections does not change much with time: the first positions are still shared by CVE-2018-0802 and CVE-2017-8570 , with another popular vulnerability CVE-2017-11882 not far behind. Among the noteworthy ones is Monitor.OSX.HistGrabber.b IoT attacks.

Malware 90

Malware Adware Ransomware IoT 90

SecureList

MAY 26, 2021

70% of Internet user computers in the EU experienced at least one Malware-class attack. This rating only includes attacks by malicious programs that fall under the Malware class; it does not include Web Anti-Virus detections of potentially dangerous or unwanted programs such as RiskTool or adware. Exploit.MSOffice.CVE-2017-11882.gen.

Phishing 127

Phishing Malware Ransomware Adware 127

Spinone

DECEMBER 17, 2019

Instead of making itself known by encrypting files and displaying a ransom note, ransomware quietly stays in your system and scans the network for other vulnerabilities. By using lateral movement, ransomware can silently spread across the public cloud and encrypt files of the whole organization.

Ransomware 83

Ransomware Passwords Encryption Phishing 83

SecureList

DECEMBER 1, 2023

Most prolific groups This section looks at ransomware groups that engage in so-called “double extortion”, that is, stealing and encrypting confidential data. Adware programs and fake system accelerators remained the main threat to macOS users in Q3. TOP 20 threats for macOS Verdict %* 1 AdWare.OSX.Agent.ai 6 AdWare.OSX.Amc.e

Mobile 74

Mobile Ransomware Malware Adware 74

SecureList

AUGUST 30, 2023

Most prolific groups This section looks at ransomware groups that engage in so-called “double extortion”, that is stealing and encrypting confidential data. CVE-2017-8570 allows loading malicious HTA scripts into the system. The list of the busiest ransomware gangs in Q2 2023 looked as follows. 2 AdWare.OSX.Agent.gen 8.54

Mobile 75

Mobile Ransomware Malware Adware 75