Bleeping Computer

NOVEMBER 20, 2023

A new Phobos ransomware variant frames the popular VX-Underground malware-sharing collective, indicating the group is behind attacks using the encryptor. [.]

Malware 88

Malware Ransomware 88

Security Boulevard

OCTOBER 31, 2023

New and updated coverage for ransomware and malware variants, including NoEscape ransomware, AvosLocker ransomware, and others. The post NoEscape Ransomware, AvosLocker Ransomware, Retch Ransomware, S-H-O Ransomware and More: Hacker’s Playbook Threat Coverage Round-up: October 31st, 2023 appeared first on SafeBreach.

Ransomware 137

Ransomware Malware 137

Security Boulevard

NOVEMBER 3, 2022

More than 4 billion malware attempts were recorded globally so far in 2022, while year-to-date ransomware attempts have already exceeded full-year totals from four of the last five years. The post Malware, Ransomware, IoT Pose Major IT Security Challenges appeared first on Security Boulevard.

IoT 98

IoT Malware Ransomware Threat Reports 98

The Hacker News

MAY 15, 2023

Poorly managed Microsoft SQL (MS SQL) servers are the target of a new campaign that's designed to propagate a category of malware called CLR SqlShell that ultimately facilitates the deployment of cryptocurrency miners and ransomware.

Malware 128

Malware Ransomware Cryptocurrency 128

Malwarebytes

MARCH 5, 2024

We’re going to let you in on a little cybersecurity secret… There’s malware on Mac computers. This mass adoption was good for Microsoft and its revenue, but it also drew and maintained the interests of cybercriminals, who would develop malware that could impact the highest number of victims. There pretty much always has been.

Malware 137

Malware Adware Ransomware Social Engineering 137

The Hacker News

MARCH 3, 2024

cybersecurity and intelligence agencies have warned of Phobos ransomware attacks targeting government and critical infrastructure entities, outlining the various tactics and techniques the threat actors have adopted to deploy the file-encrypting malware.

Ransomware 122

Ransomware Encryption Government Malware 122

SecureWorld News

APRIL 11, 2024

The Raspberry Robin malware, a heavily obfuscated Windows worm first identified in late 2021, has become one of the most prevalent threats facing enterprises today. Jason Soroko, Senior Vice President of Product at Sectigo, discussed the sophistication of this malware.

Malware 81

Malware IoT Ransomware Manufacturing 81

Malwarebytes

FEBRUARY 6, 2024

Today, Malwarebytes released its 2024 State of Malware report, detailing six cyberthreats that resource-constrained IT teams should pay attention to in 2024. Top of the list is “Big Game” ransomware, the most serious cyberthreat to businesses all around the world.

Ransomware 106

Ransomware Cybercrime Malware Social Engineering 106

SecureList

JUNE 15, 2023

Thus, it was inevitable that malware creators would one day begin not only to distribute malicious programs themselves, but also to sell them to less technically proficient attackers, thereby lowering the threshold for entering the cybercriminal community.

Malware 130

Malware Ransomware Cybercrime Hacking 130

Bleeping Computer

JULY 26, 2023

A new 'Nitrogen' initial access malware campaign uses Google and Bing search ads to promote fake software sites that infect unsuspecting users with Cobalt Strike and ransomware payloads. [.]

Malware 94

Malware Ransomware Software 94

Bleeping Computer

FEBRUARY 25, 2023

A threat actor has been targeting government entities with PureCrypter malware downloader that has been seen delivering multiple information stealers and ransomware strains. [.]

Malware 101

Malware Ransomware Government 101

Security Affairs

DECEMBER 1, 2023

The popular cybersecurity researcher Patrick Wardle dissected the new macOS ransomware Turtle used to target Apple devices. The popular cyber security researcher Patrick Wardle published a detailed analysis of the new macOS ransomware Turtle. In some cases, the anti-virus solution flagged the binary as Windows malware (“Win32.Troj.Undef”).

Ransomware 118

Ransomware Encryption Malware Cybercrime 118

Tech Republic Security

APRIL 18, 2024

Nearly 10 million devices were infected with data-stealing malware in 2023, with criminals stealing an average of 50.9 credentials per device.

Malware 157

Malware Big data Data breaches Ransomware 157

Penetration Testing

DECEMBER 13, 2023

In an ever-evolving digital landscape, the specter of malware looms large. Security researchers from Kaspersky... The post FakeSG Campaign, Akira Ransomware, AMOS Stealer: Kaspersky Uncovers Malware Variety appeared first on Penetration Testing.

Penetration Testing 65

Penetration Testing Malware Ransomware 65

Bleeping Computer

FEBRUARY 9, 2024

A new Rust-based macOS malware spreading as a Visual Studio update to provide backdoor access to compromised systems uses infrastructure linked to the infamous ALPHV/BlackCat ransomware gang. [.]

Malware 116

Malware Ransomware 116

Security Affairs

NOVEMBER 9, 2022

Experts noticed that the Amadey malware is being used to deploy LockBit 3.0 ransomware on compromised systems. Researchers from AhnLab Security Emergency Response Center (ASEC) reported that the Amadey malware is being used to deploy LockBit 3.0 ransomware on compromised systems, researchers have warned.

Malware 86

Malware Ransomware Cybercrime Phishing 86

Malwarebytes

APRIL 4, 2024

On April 2, 2024, Jackson County tweeted that it had identified significant disruptions within its IT systems, “potentially attributable to a ransomware attack” Jackson County is one of 114 counties in Missouri, with a population of approximately 718,000 people, mostly in Kansas City. Prevent intrusions. Detect intrusions.

Ransomware 110

Ransomware Backups Malware Software 110

Security Boulevard

OCTOBER 25, 2022

Read the highlights, including an in-depth look at ransomware and malware organizations. The post SecureWV 2022 Lucky Th1rt3en: Malware, ransomware, and maturity models appeared first on Security Boulevard. SecureWV 2022 was the largest gathering of security professionals in the Mountain State ever.

Malware 97

Malware Ransomware 97

CyberSecurity Insiders

JULY 8, 2021

Trickbot banking malware is back in news for inducing a new ransomware variant into the wild. Researchers from Fortinet’s FortiGuard Labs has have found that the new malware strain is acting similar to that of Conti Ransomware with a change that it Asymmetric encryption algorithms unlike other file encrypting malware variants.

Malware 110

Malware Ransomware Healthcare Encryption 110

Heimadal Security

SEPTEMBER 19, 2022

One good example is the use of malware vs. ransomware, which are sometimes utilized to define the same concept, even though […]. The post Malware vs. Ransomware: Do You Know the Difference? It is no wonder that several terms are sometimes wrongly used interchangeably, to name the same process or phenomenon.

Malware 91

Malware Ransomware Cybersecurity 91

Security Affairs

MARCH 20, 2024

security flaws in JetBrains TeamCity to deploy multiple malware families and gain administrative control over impacted systems. They are then able to perform RCE and TeamCity-related processes, such as spawning a command and scripting interpreter (including PowerShell) to download additional malware or perform discovery commands.”

Malware 108

Malware Authentication Cryptocurrency Ransomware 108

Digital Shadows

DECEMBER 15, 2023

Protection against malware and ransomware requires specific threat detection rules and metrics to measure effectiveness.

Malware 57

Malware Ransomware Threat Detection Engineering 57

Bleeping Computer

JULY 18, 2023

A financially motivated cybercrime gang has been observed deploying BlackCat ransomware payloads on networks backdoored using a revamped Sardonic malware version. [.]

Malware 74

Malware Ransomware Cybercrime 74

Security Affairs

JANUARY 13, 2024

The Finish National Cybersecurity Center (NCSC-FI) warns of increased Akira ransomware attacks targeting NAS and tape backup devices of organizations in the country. The Finish National Cybersecurity Center (NCSC-FI) reported an increase in Akira ransomware attacks, targeting organizations in the country. concludes the alert.

Ransomware 101

Ransomware Backups VPN Authentication 101

Bleeping Computer

MAY 20, 2021

A massive malware campaign pushed the Java-based STRRAT remote access trojan (RAT), known for its data theft capabilities and the ability to fake ransomware attacks. [.].

Malware 133

Malware Ransomware 133

Malwarebytes

APRIL 10, 2024

The Change Healthcare ransomware attack has taken a third cruel twist. A new ransomware group, RansomHub, has listed the organisation as a victim on its dark web leak site, saying it has 4 TB of “highly selective data,” which relates to “all Change Health clients that have sensitive data being processed by the company.”

Healthcare 95

Healthcare Ransomware Backups Software 95

Security Affairs

MARCH 11, 2024

BianLian ransomware group was spotted exploiting vulnerabilities in JetBrains TeamCity software in recent attacks. Researchers from GuidePoint Security noticed, while investigating a recent attack linked to the BianLian ransomware group, that the threat actors gained initial access to the target by exploiting flaws in a TeamCity server.

Ransomware 96

Ransomware Malware Healthcare Manufacturing 96

CyberSecurity Insiders

FEBRUARY 25, 2022

A malware that can take over social media accounts of victims is seen propelling on Microsoft App Store and reports are in that it has so far infected over 5,000 accounts in the disguise of fake Temple Run and Subway Surfer games.

Malware 121

Malware Ransomware Media Encryption 121

Malwarebytes

FEBRUARY 28, 2024

According to Reuters , the group behind the attack is the ALPHV/BlackCat ransomware group. In our monthly ransomware reviews you will typically find them in the top five of ransomware groups. How to avoid ransomware Block common forms of entry. They are certainly no strangers to attacking healthcare providers.

Healthcare 113

Healthcare Ransomware Backups Technology 113

The Hacker News

FEBRUARY 23, 2022

Similarities have been unearthed between the Dridex general-purpose malware and a little-known ransomware strain called Entropy, suggesting that the operators are continuing to rebrand their extortion operations under a different name.

Malware 101

Malware Ransomware Hacking Software 101

Security Affairs

NOVEMBER 19, 2023

8Base ransomware operators were observed using a variant of the Phobos ransomware in a recent wave of attacks. Cisco Talos researchers observed 8Base ransomware operators using a variant of the Phobos ransomware in recent attacks. The ransomware component is then decrypted and loaded into the SmokeLoader process’ memory.

Ransomware 115

Ransomware Encryption Backups Manufacturing 115

Bleeping Computer

FEBRUARY 22, 2024

LockBit ransomware developers were secretly building a new version of their file encrypting malware, dubbed LockBit-NG-Dev - likely a future LockBit 4.0, when law enforcement took down the cybercriminal's infrastructure earlier this week. [.]

Ransomware 121

Ransomware Encryption Malware 121

Security Affairs

JUNE 5, 2021

Cyble researchers investigated a recent attack on an India-based IT firm that was hit by the BlackCocaine Ransomware gang. The Cyble Research team discovered that the company was the victim of the BlackCocaine Ransomware gang. The researchers reported that ransomware uses the AES and RSA encryption methods. Pierluigi Paganini.

Ransomware 119

Ransomware Malware Encryption Financial Services 119

Security Affairs

JANUARY 30, 2024

Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack. The attack was carried out by the Cactus ransomware gang , which claims to have stolen terabytes of corporate data from the company. The Cactus ransomware relies on multiple legitimate tools (e.g.

Ransomware 117

Ransomware Hacking Data breaches Digital transformation 117

Security Affairs

JANUARY 16, 2023

Antivirus firm Avast released a free decryptor for the BianLian ransomware family that allows victims to recover locked files. Security firm Avast has released a free decryptor for the BianLian ransomware to allow victims of the malware to recover locked files. ” reads the post published by Avast. anabolic.exe.

Ransomware 89

Ransomware Malware Antivirus Encryption 89

Security Boulevard

OCTOBER 20, 2023

Law enforcement agencies throughout Europe and the United States took a big swing at the notorious RagnaLocker ransomware group, arresting a malware developer, seizing parts of its infrastructure, and shutting down negotiations and leak sites on the Tor network.

Ransomware 128

Ransomware Malware Cybersecurity Network Security 128

Hacker Combat

JULY 7, 2022

According to cybersecurity researchers, the bumblebee loader is now a darling in the ransomware ecosystem. A new malware is now an important component when it comes to engineering ransomware attacks. The malware, which goes by the name Bumblebee, was recently analyzed by Symantec researchers.

Malware 98

Malware Ransomware Phishing Engineering 98