Remove story conti-ransomware-russia
article thumbnail

U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group

Krebs on Security

Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating “ Trickbot ,” a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers since its debut in 2016. companies and government entities.

Hacking 193
article thumbnail

Conti Ransomware Group Diaries, Part I: Evasion

Krebs on Security

A Ukrainian security researcher this week leaked several years of internal chat logs and other sensitive data tied to Conti , an aggressive and ruthless Russian cybercrime group that focuses on deploying its ransomware to companies with more than $100 million in annual revenue. On Sunday, Feb. ” GAP #1. . ” GAP #1.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

NB65 Hackers Attacking Russian Orgs in Ukraine Retaliation

SecureWorld News

and German authorities shutdown the largest darknet marketplace in the world, the Department of Justice disrupted a botnet controlled by Russia's Main Intelligence Directorate (GRU), and Microsoft announced it had successfully blocked cyberattacks from Russia targeting Ukraine. NB65 uses Conti ransomware to target Russia.

article thumbnail

Episode 239: Power shifts from Russia to China in the Cyber Underground

The Security Ledger

The post Episode 239: Power shifts from Russia to China in the Cyber Underground appeared first on The. Related Stories Feel Good Ukraine Tractor Story Highlights Ag Cyber Risk Episode 238: Robots Are The Next Frontier In Healthcare Cyber Risk Episode 236: Cyberwar Takes A Back Seat In Ukraine (For Now). Also like Russia,

article thumbnail

US, UK Sanction Cybercriminals Behind Trickbot Gang

SecureWorld News

The United States and United Kingdom recently sanctioned Russia-based individuals associated with the cybercrime group known as Trickbot, marking a significant escalation in the fight against cybercrime. Trickbot has often been associated with the Conti and Ryuk ransomware strains, two of the most notorious in the world.

article thumbnail

How ransomware gangs are connected, sharing resources and tactics

Malwarebytes

Many of us who read the news daily encounter a regular drum beat of ransomware stories that are both worrying and heartbreaking. SunCrypt was found using IP addresses and Command and Control infrastructure tied to Twisted Spider to deliver the ransomware payload in its campaigns. The ties that bind. Shared infrastructure.

article thumbnail

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Krebs on Security

More recently, it appears Megatraffer has been working with ransomware groups to help improve the stealth of their malware. That protracted and public conflict formed the backdrop of my 2014 book — “ Spam Nation: The Inside Story of Organized Cybercrime, from Global Epidemic to Your Front Door.

Malware 242