Penetration Testing

JANUARY 18, 2024

The AhnLab Security Intelligence Center has uncovered that the LockBit ransomware is being spread through malicious Word files disguised as resumes.

Ransomware 103

Ransomware Penetration Testing Security Intelligence Malware 103

Hot for Security

MAY 21, 2021

Security researchers have discovered a new massive spam email campaign designed to push the latest version of STRRAT malware, according to data shared by Microsoft. Ransomware attacks are among the most dangerous for people and companies alike. Attackers used compromised email accounts to launch the email campaign.

Ransomware 122

Ransomware Malware Security Intelligence Encryption 122

Penetration Testing

JANUARY 29, 2024

AhnLab Security Intelligence Center (ASEC) has recently uncovered a concerning development in ransomware attacks. A new threat actor, previously known as Trigona ransomware, has been identified as installing Mimic ransomware.

Ransomware 88

Ransomware Penetration Testing Security Intelligence Malware 88

Penetration Testing

MAY 1, 2024

The world of cybersecurity is witnessing an alarming trend as ransomware groups intensify their attacks on Microsoft SQL (MS-SQL) servers, exploiting weak management practices to deploy devastating malware.

Penetration Testing 86

Penetration Testing Ransomware Security Intelligence Malware 86

Security Affairs

OCTOBER 16, 2022

Microsoft warns that new Prestige ransomware is targeting transportation and logistics organizations in Ukraine and Poland. Microsoft reported that new Prestige ransomware is being used in attacks aimed at transportation and logistics organizations in Ukraine and Poland. ” continues the report.

Ransomware 105

Ransomware Encryption Backups Security Intelligence 105

Security Affairs

MAY 20, 2023

Cybercriminal gang FIN7 returned with a new wave of attacks aimed at deploying the Clop ransomware on victims’ networks. The group was spotted deploying the Clop ransomware in opportunistic attacks in April 2023. Then they use OpenSSH and Impacket to move laterally and deploy the Clop ransomware payload.

Cybercrime 98

Cybercrime Ransomware Security Intelligence Hacking 98

Security Affairs

NOVEMBER 11, 2022

Microsoft linked Prestige ransomware attacks against organizations in Ukraine and Poland to Russia-linked threat actors. Microsoft has identified a new ransomware strain "Prestige" in limited targeted attacks in Ukraine and Poland. The campaign shares victimology with recent operations conducted by Russia-linked threat actors.

Ransomware 98

Ransomware Telecommunications DNS Hacking 98

SC Magazine

MARCH 12, 2021

The company confirmed a new family of ransomware being used after an initial compromise of unpatched on-premises Exchange Servers. Microsoft confirmed “a new family of ransomware being used after an initial compromise of unpatched on-premises Exchange Servers,” via its Security Intelligence Twitter account.

Ransomware 82

Ransomware Security Intelligence Media Accountability 82

Security Affairs

AUGUST 7, 2023

Senior official reports a quadruple increase in ransomware attacks against Finland since it started the process to join NATO. The number of ransomware attacks targeting Finland has increased fourfold since the country began the process of joining NATO in 2023. So I don’t believe there’s a single silver bullet.”

Ransomware 98

Ransomware Government Cyber threats Security Intelligence 98

Penetration Testing

JUNE 5, 2024

In an unexpected twist of cybercrime, security researchers at AhnLab Security Intelligence Center (ASEC) have revealed a bizarre case of one criminal gang inadvertently aiding another.

Ransomware 56

Ransomware Cybercrime Security Intelligence Malware 56

BH Consulting

NOVEMBER 14, 2024

That’s because criminals are “slow to change” and they have little incentive to invest in alternatives as long as easy exploits like ransomware continues to make money. Another recurring theme was ransomware. Criminals aren’t investing anywhere near the amount of money in AI as legitimate companies, McArdle added. Drowning in data?

Artificial Intelligence 64

Artificial Intelligence Ransomware Social Engineering Cybersecurity 64

Security Affairs

OCTOBER 10, 2020

The TA505 group was involved in campaigns aimed at distributing the Dridex banking Trojan, along with Locky , BitPaymer , Philadelphia , GlobeImposter , and Jaff ransomware families. Security experts from cyber-security firm Prevailion reported that TA505 has compromised more than 1,000 organizations. states Microsoft.

Cybercrime 137

Cybercrime Security Intelligence Authentication Banking 137

Webroot

NOVEMBER 5, 2021

But despite the headlines, most ransomware targets families as well as small and medium sized businesses. Targeted by ransomware. Ransomware uses modern technology and cutting-edge tools to do something that feels decidedly old fashioned – steal from you. Ransomware tactics. Their goal is disruption.

Ransomware 109

Ransomware Backups Technology Banking 109

Malwarebytes

AUGUST 16, 2021

Last week on Malwarebytes Labs: Home routers are being hijacked using a vulnerability disclosed just 2 before Ransomware turncoat leaks Conti data, lifts the lid on the ransomware business Check your passwords! Stay safe, everyone!

Social Engineering 105

Social Engineering Scams VPN Phishing 105

Security Affairs

JANUARY 19, 2022

We reported our discovery to SolarWinds, and security updates have been released. More info: [link] — Microsoft Security Intelligence (@MsftSecIntel) January 19, 2022. In the past, other threat actors exploited Serv-U vulnerabilities to carry out malicious activities.

Authentication 141

Authentication Hacking Ransomware Security Intelligence 141

Security Affairs

FEBRUARY 2, 2020

pic.twitter.com/mcRyEBUmQH — Microsoft Security Intelligence (@MsftSecIntel) January 30, 2020. The TA505 group was involved in campaigns aimed at distributing the Dridex banking Trojan, along with Locky , BitPaymer , Philadelphia , GlobeImposter , and Jaff ransomware families. based electrical company, a U.S.

Malware 103

Malware Security Intelligence Banking Phishing 103

Security Affairs

NOVEMBER 17, 2021

Learn more from this blog summarizing these trends, as presented at #CyberWarCon : [link] — Microsoft Security Intelligence (@MsftSecIntel) November 16, 2021. The analysis focuses on six Iranian hacking groups that are increasingly utilizing ransomware to either fundraise or disrupt the computer networks of the targets.

VPN 134

VPN Accountability Social Engineering Media 134

eSecurity Planet

OCTOBER 4, 2021

percent of all malware detected on networks of WatchGuard Technologies customers in the second quarter came over encrypted connections, raising the security risk for the 80 percent of such organizations that lack processes for decrypting and scanning HTTPS traffic for threats. PowerShell, Ransomware Threats Grow. A surprising 91.5

Encryption 145

Encryption Malware Ransomware Firewall 145

Security Affairs

SEPTEMBER 24, 2020

pic.twitter.com/POppQ51uMX — Microsoft Security Intelligence (@MsftSecIntel) September 22, 2020. Emotet malware is also used to deliver other malicious code, such as Trickbot and QBot trojan or ransomware such as Conti (TrickBot) or ProLock (QBot). Additional malware is downloaded and installed when running these macros.

Malware 143

Malware Passwords Advertising Ransomware 143

Malwarebytes

JULY 5, 2021

Other cybersecurity news. Stay safe, everyone!

Cyber Insurance 106

Cyber Insurance Social Engineering Scams Insurance 106

Malwarebytes

APRIL 18, 2023

There’s a new ransomware gang in town, stitched together from members of well known threat creators to push a new kind of malware focused on punishing unwary organisations. The malware family, called “Domino”, is the brainchild of FIN7 and ex-Conti ransomware members. This current campaign is, sadly, no different.

Malware 95

Malware Banking Ransomware Passwords 95

SC Magazine

JULY 2, 2021

Today’s columnist, Troy Wachter of Cyberint, says defeating ransomware groups like the one that hit Colonial Pipeline will take teamwork across departments and threat intelligence tools that show how and where specific threats have originated and how they are evolving. OrbitalJoe CreativeCommons CC BY-NC-ND 2.0.

Ransomware 59

Ransomware Engineering Encryption Insurance 59

Webroot

JANUARY 7, 2022

“In 2022, the widespread growth of mobile access will increase the prevalence of mobile malware, given all of the behavior tracking capabilities,” says Grayson Milbourne, security intelligence director, Carbonite + Webroot, OpenText companies. Ransomware. Earlier in 2021, we detailed the hidden costs of ransomware in our eBook.

Cybercrime 116

Cybercrime Ransomware Phishing Cryptocurrency 116

Security Affairs

MARCH 12, 2021

Microsoft researchers also spotted a ransomware gangs that is exploiting ProxyLogon flaws to spread a piece of malware tracked as DearCry. We have detected and are now blocking a new family of ransomware being used after an initial compromise of unpatched on-premises Exchange Servers. and also as DearCry. and also as DearCry.

Cyber Attacks 143

Cyber Attacks Cybercrime Authentication Hacking 143

Webroot

JUNE 2, 2022

According to the latest 2022 BrightCloud® Threat Report , small to medium-sized businesses (SMBs) are particularly vulnerable to becoming a victim of a ransomware attack. Without human security experts and solutions at their disposable, these businesses remain susceptible to attacks.

Threat Detection 116

Threat Detection Cyber Insurance Small Business Insurance 116

Security Affairs

APRIL 18, 2020

pic.twitter.com/V2JcZg2kjt — Microsoft Security Intelligence (@MsftSecIntel) April 17, 2020. Then the attackers attempt to monetize their efforts by deploying other payloads, like the Ryuk Ransomware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Malware 144

Malware Advertising Security Intelligence Phishing 144

Thales Cloud Protection & Licensing

MARCH 25, 2025

This results in fewer resources dedicated to security operations, ubiquitous compliance controls, and significantly reduced risk across complex IT environments To learn more about the strengths of Thaless leading data security platform, read the full KuppingerCole report here.

Unstructured Data 71

Unstructured Data Marketing Threat Detection Encryption 71

Security Affairs

OCTOBER 6, 2020

The infamous banking trojan is also used to deliver other malicious code, such as Trickbot and QBot trojan or ransomware such as Conti (TrickBot) or ProLock (QBot). pic.twitter.com/POppQ51uMX — Microsoft Security Intelligence (@MsftSecIntel) September 22, 2020.

Government 142

Government Banking Advertising Malware 142

Security Boulevard

MARCH 25, 2025

This results in fewer resources dedicated to security operations, ubiquitous compliance controls, and significantly reduced risk across complex IT environments To learn more about the strengths of Thaless leading data security platform, read the full KuppingerCole report here.

Unstructured Data 64

Unstructured Data Marketing Threat Detection Encryption 64

The Last Watchdog

MAY 1, 2019

Lucy’s’s software allows companies to easily set-up customizable mock attacks to test employees’ readiness to avoid phishing, ransomware and other attacks with a social engineering component. This is stunning: phishing attacks soared in 2018, rising 250% between January and December, according to Microsoft’s Security Intelligence Report.

Social Engineering 166

Social Engineering Engineering Phishing Banking 166

Daniel Miessler

NOVEMBER 6, 2020

This gap between need and skilled people is even more acute due to the rise of the ransomware threat , and the world is going to have to respond with more people who can at least do the basics, even if that’s through short certification programs. ESG and ISSA. I think we need a national program to address this.

InfoSec 255

InfoSec Insurance Artificial Intelligence Cybersecurity 255

Malwarebytes

JUNE 14, 2022

We urge customers to upgrade to the latest version or apply recommended mitigations: [link] — Microsoft Security Intelligence (@MsftSecIntel) June 11, 2022. AvosLocker Ransomware and Linux botnets are getting in on the action. A mixed bag of attacks. Has Windows & Linux versions.

Ransomware 78

Ransomware Scams Security Intelligence Encryption 78

Security Affairs

SEPTEMBER 20, 2022

This week, VMware and Microsoft warned of an ongoing, widespread Chromeloader malware campaign that is dropping malicious browser extensions, node-WebKit malware, and ransomware. pic.twitter.com/v6sexKgDSg — Microsoft Security Intelligence (@MsftSecIntel) September 16, 2022.

Malware 98

Malware Adware Ransomware Security Intelligence 98

Security Affairs

JANUARY 26, 2022

VMware urges customers to patch critical Log4j security vulnerabilities impacting Internet-exposed VMware Horizon servers targeted in ongoing attacks. This month, the Night Sky ransomware operation started exploiting the Log4Shell flaw (CVE-2021-44228) in the Log4j library to gain access to VMware Horizon systems.

Internet 98

Internet Internet Ransomware Hacking 98

NopSec

SEPTEMBER 12, 2016

Businesses, governments, and consumers alike need to be aware of ransomware – a type of malware that can inflict serious damage on your finances and productivity in a very short span of time. In earlier days, ransomware programs would simply lock a computer’s screen and prevent programs and files from being opened.

Ransomware 40

Ransomware Risk Social Engineering Penetration Testing 40

The Last Watchdog

MAY 20, 2022

By utilizing a structured mix of network and endpoint monitoring, behavioral analysis, Machine Learning tools, and threat intelligence, Heimdal’s XDR/SOC acts as a central hub for security intelligence, gathering and dynamically comparing input from multiple sources (endpoints, networks, cloud workloads) to detect threats faster and ramp up response (..)

Marketing 247

Marketing Digital transformation Technology Cybersecurity 247

The Last Watchdog

MARCH 19, 2019

Security information and event management, or SIEM, could yet turn out to be the cornerstone technology for securing enterprise networks as digital transformation unfolds. Related: How NSA cyber weapon could be used for a $200 billion ransomware caper. Exabeam is a bold upstart in the SIEM space.

Big data 157

Big data Internet Internet IoT 157