Security Affairs

NOVEMBER 19, 2023

8Base ransomware operators were observed using a variant of the Phobos ransomware in a recent wave of attacks. Cisco Talos researchers observed 8Base ransomware operators using a variant of the Phobos ransomware in recent attacks. The ransomware component is then decrypted and loaded into the SmokeLoader process’ memory.

Ransomware 128

Ransomware Encryption Backups Manufacturing 128

Security Affairs

AUGUST 31, 2021

Recently emerged LockFile ransomware family LockFile leverages a novel technique called intermittent encryption to speed up encryption. LockFile ransomware gang started its operations last month, recently it was spotted targeting Microsoft Exchange servers using the recently disclosed ProxyShell vulnerabilities.

Encryption 112

Encryption Ransomware Financial Services Antivirus 112

Bleeping Computer

FEBRUARY 2, 2022

disclosed a data breach after suffering a ransomware attack on August 1st, 2021, allowing threat actors to steal data before encrypting files. [.]. Morley Companies Inc.

Business Services 68

Business Services Ransomware Data breaches Encryption 68

Security Affairs

JUNE 28, 2023

Researchers warn of a massive spike in May and June 2023 of the activity associated with the ransomware group named 8Base. VMware Carbon Black researchers observed an intensification of the activity associated with a stealthy ransomware group named 8Base. and Brazil. ” reported NCC.

Ransomware 93

Ransomware Encryption Manufacturing Business Services 93

Security Affairs

AUGUST 21, 2021

A new ransomware gang named LockFile targets Microsoft Exchange servers exploiting the recently disclosed ProxyShell vulnerabilities. A new ransomware gang named LockFile targets Microsoft Exchange servers using the recently disclosed ProxyShell vulnerabilities. “The LockFile ransomware was first observed on the network of a U.S.

Ransomware 135

Ransomware Financial Services Hacking Encryption 135

Malwarebytes

AUGUST 23, 2021

Ransomware. Several researchers have pointed to a ransomware group named LockFile that combines ProxyShell with PetitPotam. Later, the threat actor revisited to initiate the staging of artefacts related to the LockFile ransomware. PetitPotam enables a threat actor to launch an NTLM relay attack on domain controllers.

Authentication 104

Authentication Ransomware Encryption System Administration 104

SecureWorld News

AUGUST 31, 2020

Ransomware attack shuts down California online learning. In Central California, the Selma Unified School District abruptly stopped online classes during the middle of the day because of a ransomware attack which was spreading across the district's network. Ransomware attack hits North Carolina schools.

Ransomware 64

Ransomware Cryptocurrency Technology Insurance 64