article thumbnail

Giant health insurer struck by ransomware didn't have antivirus protection

Malwarebytes

The Philippine Health Insurance Corporation (PhilHealth), has confirmed that it was unprotected by antivirus software when it was attacked by the Medusa ransomware group in September. EDR can detect an intruder's suspicious activity in advance of them running ransomware, as well as being able to identify the ransomware itself.

article thumbnail

Ransomware Attackers Abuse Genshin Impact Anti-Cheat System to Disable Antivirus

The Hacker News

A vulnerable anti-cheat driver for the Genshin Impact video game has been leveraged by a cybercrime actor to disable antivirus programs to facilitate the deployment of ransomware, according to findings from Trend Micro. sys") is signed with a valid certificate,

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Ransomware: April 2022 review

Malwarebytes

The Malwarebytes Threat Intelligence team monitors the threat landscape continuously and produces monthly ransomware reports based on a mixture of proprietary and open-source intelligence. Black Basta made a name for itself very quickly by coming out of nowhere and carrying out at least eleven successful breaches in April 2022.

article thumbnail

Ransomware: March 2022 review

Malwarebytes

In this March 2022 ransomware review, we go over some of the most successful ransomware incidents based on both open source and dark web intelligence. Ransomware Attacks by Gang. Ransomware Attacks by Country. Ransomware Attacks by Industry. Ransomware Mitigations. Source: IC3.gov.

article thumbnail

Ransomware: February 2022 review

Malwarebytes

In this February 2022 ransomware review, we go over some the most successful ransomware incidents based on both open source and dark web intelligence. > BlackByte Ransomware Sample hash: 1df11bc19aa52b623bdf15380e3fded56d8eb6fb7b53a2240779864b1a6474ad. Observed since: February 2022 Ransomware note: .<company_name>

article thumbnail

Threat actor abuses Genshin Impact Anti-Cheat driver to disable antivirus

Security Affairs

Threat actors abused a vulnerable anti-cheat driver for the Genshin Impact video game to disable antivirus software. sys, for the Genshin Impact video game to disable antivirus software. According to Trend Micro, a cybercrime gang abused the driver to deploy ransomware. Such is the case of mhyprot2.sys, Pierluigi Paganini.

article thumbnail

Threat Group Continuously Updates Malware to Evade Antivirus Software

eSecurity Planet

They observed another spear-phishing campaign in March 2022. However, the same also goes for antivirus software and other anti-malware solutions. Also read: Ransomware Group Uses Vulnerability to Bypass EDR Products. YouTube is full of detailed tutorials for achieving that, using simple file renaming (e.g., Defense in Depth.

Antivirus 114