U.S. officials noted that ransomware groups are directing attacks toward firms involved in time-sensitive financial events, such as corporate mergers and acquisitions. The operators look for private and non-publicly available sensitive information to use...
FortiGuard Labs found a Chaos ransomware variant being circulated on Japanese Minecraft forums. While this variant encrypts certain files, it completely destroys some. Gamers are recommended to stay alert while being offered such commodities...
The CISA Director said that the agency has begun an effort to identify what she calls “primary systemically important entities,” or “Pisces,” to protect their systems from global cyberthreats. click here to read full...
A new report from BlackBerry has uncovered an initial access broker called “Zebra2104” that has connections to three malicious cybercriminal groups, some of which are involved in ransomware and phishing. click here to read...
The ProxyShell attacks against vulnerable Microsoft Exchange servers started several months ago, with LockFile and Conti being among the first ransomware groups to exploit them. click here to read full Article Read more on...
Nationwide Laboratory Services identified suspicious activity on its network on May 19, 2021. An examination of the activity revealed that attackers had used ransomware to encrypt files across the healthcare provider’s network. click here...
The phishing email body contains a hyperlink to a Google Drive URL, which, if clicked, downloads an MHT file (webpage archive) onto the victim’s machine and infects it with MirCop ransomware. click here to...
The U.S. government on Thursday announced a $10 million reward for information that may lead to the identification or location of key individuals who hold leadership positions in the DarkSide ransomware group or any...
Talos researchers warn of a new threat actor that is hacking Microsoft Exchange servers by exploiting ProxyShell flaws to gain access to corporate and deploy the Babuk Ransomware. click here to read full Article...
BlackMatter claims to shut down ransomware operations click here to read full Article Read More on latest Security Updates
Ransomware threats continue to be many criminals’ weapon of choice for reliably shaking down victims small, medium, and large, in pursuit of a safe, easy and reliable payday. click here to read full Article...
With the BlackMatter ransomware operation shutting down, existing affiliates are moving their victims to the competing LockBit ransomware website for continued extortion. click here to read full Article Read more on Malware updates &...
BlackMatter operates a private ransomware-as-a-service (RaaS) website that affiliates can use to communicate with the core operators, open support tickets, and receive new ransomware builds. click here to read full Article Read more on...
An analysis of new samples of BlackMatter ransomware for Windows and Linux has revealed the extent to which the operators have continually added new features and encryption capabilities in successive iterations over a three-month...
According to the Ransomware Task Force, ransomware recovery efforts can last an average of 287 days. The biggest claimed defense to ransomware attacks—backups— can also often fail. click here to read full Article Read...
While rare, ransomware developers can make mistakes in implementing encryption, causing unintended flaws. Mistakes can occur when developers use patchwork code and lack appropriate expertise. click here to read full Article Read More on...
