Krebs on Security

SEPTEMBER 30, 2023

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang’s internal operations. It continues: “Prior to deploying the ransomware, Snatch threat actors were observed spending up to three months on a victim’s system.

Ransomware 216

Ransomware Accountability Cybercrime Backups 216

SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years.

Cybercrime 138

Cybercrime Banking Malware Ransomware 138

Security Affairs

MARCH 14, 2023

Cyber security researcher Luca Mella analyzed the Makop ransomware employed in a recent intrusion. Executive summary Insights from a recent intrusion authored by Makop ransomware operators show persistence capability through dedicated.NET tools. Advanced_Port_Scanner_2.5.3869.exe

Ransomware 85

Ransomware Software System Administration Encryption 85

Krebs on Security

MAY 13, 2024

and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. was used by a Russian-speaking member called Pin on the English-language cybercrime forum Opensc. 2011 said he was a system administrator and C++ coder. Image: Shutterstock.

Ransomware 213

Ransomware Cybercrime Accountability Malware 213

Digital Shadows

JULY 5, 2021

On 02 July 2021, details started to emerge of a sophisticated supply-chain attack targeting Kaseya VSA, virtual system administrator software used to manage and monitor customers’ infrastructure. Kaseya VSA is commonly used by managed service providers (MSPs) in the US and UK to help them manage their clients’ systems.

Ransomware 52

Ransomware Encryption Cryptocurrency System Administration 52

Krebs on Security

AUGUST 5, 2021

It’s nice when ransomware gangs have their bitcoin stolen, malware servers shut down, or are otherwise forced to disband. Indeed, some of the most destructive and costly ransomware groups are now in their third incarnation. Indeed, some of the most destructive and costly ransomware groups are now in their third incarnation.

Ransomware 313

Ransomware Cybercrime Malware System Administration 313

Security Affairs

OCTOBER 3, 2023

Our investigation revealed that this remote endpoint is associated with criminal activities dating back to 2019, indicating that these hosts were likely under the control of the same technical administration. Introduction Digging into ransomware infections always provides valuable insights.

Scams 125

Scams Ransomware System Administration Malware 125