SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years.

Cybercrime 137

Cybercrime Banking Malware Ransomware 137

Krebs on Security

SEPTEMBER 30, 2023

GandCrab dissolved in July 2019, and is thought to have become “ REvil ,” one of the most ruthless and rapacious Russian ransomware groups of all time. “The command requires Windows system administrators,” Truniger’s ads explained. “Experience in backup, increase privileges, mikicatz, network.

Ransomware 215

Ransomware Accountability Cybercrime Backups 215

Security Affairs

APRIL 18, 2021

The Ukrainian national Fedir Hladyr (35), aka “das” or “AronaXus,” was sentenced to 10 years in prison for having served as a manager and systems administrator for the financially motivated group FIN7 , aka Carbanak. Hladyr also controlled the organization’s encrypted channels of communication.”

System Administration 123

System Administration Penetration Testing Malware Banking 123

Security Affairs

MARCH 14, 2023

Their operations are based on the human operator ransomware practice where most of the intrusion is handled by hands-on keyboard criminals, even in the encryption stage. The Makop criminals were recently using version 2.5.3869 of the tool, which dates back to 2019. Advanced_Port_Scanner_2.5.3869.exe

Ransomware 91

Ransomware Software System Administration Encryption 91

Malwarebytes

APRIL 20, 2021

In 2018 three high-ranking members of a sophisticated international cybercrime group operating out of Eastern Europe were arrested and taken into custody by US authorities. Hladyr also controlled the organization’s encrypted channels of communication. The conviction. According to acting US Attorney Tessa M.

System Administration 85

System Administration Banking Malware Penetration Testing 85

Digital Shadows

JULY 5, 2021

On 02 July 2021, details started to emerge of a sophisticated supply-chain attack targeting Kaseya VSA, virtual system administrator software used to manage and monitor customers’ infrastructure. Consequently, it makes sense for them to encrypt the compromised networks and demand a ransom to restore them.

Ransomware 52

Ransomware Encryption Cryptocurrency System Administration 52

Krebs on Security

AUGUST 5, 2021

Reinvention is a basic survival skill in the cybercrime business. But a little more than a month later, a new ransomware affiliate program called BlackMatter emerged, and experts quickly determined BlackMatter was using the same unique encryption methods that DarkSide had used in their attacks.

Ransomware 312

Ransomware Cybercrime Malware System Administration 312