Security Affairs

AUGUST 31, 2021

Recently emerged LockFile ransomware family LockFile leverages a novel technique called intermittent encryption to speed up encryption. LockFile ransomware gang started its operations last month, recently it was spotted targeting Microsoft Exchange servers using the recently disclosed ProxyShell vulnerabilities.

Encryption 144

Encryption Ransomware Financial Services Antivirus 144

Security Affairs

NOVEMBER 19, 2023

8Base ransomware operators were observed using a variant of the Phobos ransomware in a recent wave of attacks. Cisco Talos researchers observed 8Base ransomware operators using a variant of the Phobos ransomware in recent attacks. The ransomware component is then decrypted and loaded into the SmokeLoader process’ memory.

Ransomware 143

Ransomware Encryption Backups Manufacturing 143

Security Affairs

AUGUST 21, 2021

A new ransomware gang named LockFile targets Microsoft Exchange servers exploiting the recently disclosed ProxyShell vulnerabilities. A new ransomware gang named LockFile targets Microsoft Exchange servers using the recently disclosed ProxyShell vulnerabilities. “The LockFile ransomware was first observed on the network of a U.S.

Ransomware 145

Ransomware Hacking Financial Services Encryption 145

Bleeping Computer

FEBRUARY 2, 2022

disclosed a data breach after suffering a ransomware attack on August 1st, 2021, allowing threat actors to steal data before encrypting files. [.]. Morley Companies Inc.

Business Services 68

Business Services Ransomware Data breaches Encryption 68

Security Affairs

JUNE 28, 2023

Researchers warn of a massive spike in May and June 2023 of the activity associated with the ransomware group named 8Base. VMware Carbon Black researchers observed an intensification of the activity associated with a stealthy ransomware group named 8Base. and Brazil. ” reported NCC.

Ransomware 98

Ransomware Encryption Manufacturing Business Services 98

Malwarebytes

AUGUST 23, 2021

Ransomware. Several researchers have pointed to a ransomware group named LockFile that combines ProxyShell with PetitPotam. Later, the threat actor revisited to initiate the staging of artefacts related to the LockFile ransomware. PetitPotam enables a threat actor to launch an NTLM relay attack on domain controllers.

Authentication 125

Authentication Ransomware Encryption System Administration 125

SecureWorld News

AUGUST 31, 2020

Ransomware attack shuts down California online learning. In Central California, the Selma Unified School District abruptly stopped online classes during the middle of the day because of a ransomware attack which was spreading across the district's network. Ransomware attack hits North Carolina schools.

Ransomware 70

Ransomware Cryptocurrency Technology Insurance 70