Malwarebytes
NOVEMBER 1, 2021
Ransomware attacks, despite dramatically increasing in frequency this summer , remain opaque for many potential victims. It isn’t anyone’s fault, necessarily, since news articles about ransomware attacks often focus on the attack, the suspected threat actors, the ransomware type, and, well, not much else.
CSO Magazine
NOVEMBER 28, 2022
Cobalt Strike is a commercial attack framework designed for red teams that has also been adopted by many threat actors, from APT groups to ransomware gangs and other cybercriminals. To read this article in full, please click here Living off the land is a common tactic.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
MARCH 14, 2023
Cyber security researcher Luca Mella analyzed the Makop ransomware employed in a recent intrusion. Executive summary Insights from a recent intrusion authored by Makop ransomware operators show persistence capability through dedicated.NET tools. Everything is freeware software maintained by Voidtools.
Malwarebytes
JULY 7, 2021
Only rarely do companies allow us a look inside their organization while they are recovering from a ransomware attack. The attack used a zero-day vulnerability to create a malicious Kasaya VSA update, which spread REvil ransomware to some of the MSPs that use it, and then on to the customers of those MSPs. Know when to communicate.
Spinone
FEBRUARY 5, 2020
When someone asks you about the best ransomware protection , the first thing you’ll probably come up with is a backup. Antivirus software and firewalls are just the first line of defense, which is far from being 100% effective against ransomware. Ransomware can infect backups. Can Ransomware Encrypt Backups?
Security Affairs
OCTOBER 3, 2023
Our investigation revealed that this remote endpoint is associated with criminal activities dating back to 2019, indicating that these hosts were likely under the control of the same technical administration. Introduction Digging into ransomware infections always provides valuable insights.
Digital Shadows
JULY 5, 2021
On 02 July 2021, details started to emerge of a sophisticated supply-chain attack targeting Kaseya VSA, virtual system administrator software used to manage and monitor customers’ infrastructure. Kaseya VSA is commonly used by managed service providers (MSPs) in the US and UK to help them manage their clients’ systems.
Expert insights. Personalized for you.
115 
Let's personalize your content