article thumbnail

Experts link the Black Basta ransomware operation to FIN7 cybercrime gang

Security Affairs

In order to weaken the security defenses installed on the target machine, Black Basta targets installed security solutions with specific batch scripts downloaded into the Windows directory. The DisableAntiSpyware parameter allows disabling the Windows Defender Antivirus in order to deploy another security solution.

article thumbnail

Who’s Behind the GandCrab Ransomware?

Krebs on Security

But GandCrab far eclipsed the success of competing ransomware affiliate programs largely because its authors worked assiduously to update the malware so that it could evade antivirus and other security defenses. ru , a site which marketed dedicated Web servers to individuals involved in various cybercrime projects.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

5 Major Cybersecurity Trends to Know for 2024

eSecurity Planet

Cybercrime will go to the next level: Cyberattackers will implement improved skills, “shift left” attacks, and shifting strategies to adjust to evolving cyberdefense. While these solutions (such as [Microsoft365]) offer a level of protection and capabilities (antivirus, anti-spam, archiving, etc.),

article thumbnail

Dutch police arrested the author of Dryad and Rubella Macro Builders

Security Affairs

The macro might also purposely attempt to bypass endpoint security defenses. . The Rubella Macro Builder is cheap, fast and easy to use, the malware it generated can evade antivirus detection.

Malware 68
article thumbnail

APT trends report Q1 2021

SecureList

On February 24, the National Security Defense Council of Ukraine (NSDC) publicly warned that a threat actor had exploited a national documents circulation system (SEI EB) to distribute malicious documents to Ukrainian public authorities. Other interesting discoveries. Some of the samples cannot be associated with any known activity.

Malware 142