Unveiling the Fallout: Operation Cronos’ Impact on LockBit Following Landmark Disruption
The first 72 hours after LockBit’s disruption In the days following the disruption, the topic was still being widely discussed...
Trend Micro Research : Ransomware
Agenda Ransomware Propagates to vCenters and ESXi via Custom PowerShell Script
Some drivers we have observed being leveraged by the Agenda ransomware is YDark, a publicly available tool designed for kernel...
TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types
Executing domain discovery and persistence commands Aside from malware deployment, we have also seen several attempts to discover network infrastructure...
Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO
Multistage RA World Ransomware Uses Anti-AV Tactics, Exploits GPO Content has been added to your Folio Go to Folio (0)...
Threat Actor Groups, Including Black Basta, are Exploiting Recent ScreenConnect Vulnerabilities
Threat actors exploiting other remote management tools We also saw threat actors deploying different remote management tools, such as another...
Kasseika Ransomware Deploys BYOVD Attacks, Abuses PsExec and Exploits Martini…
Ransomware In this blog, we detail our investigation of the Kasseika ransomware and the indicators we found suggesting that the...
Reduce Business Email Compromise with Collaboration
The technology landscape moves fast – but some things remain remarkably unchanged. Despite the emergence of alternative platforms, email is...
Cloud Security Predictions at AWS re:Invent 2023
Cloud Security Predictions at AWS re:Invent 2023 Content has been added to your Folio Go to Folio (0) close Cyber...
ALPHV/BlackCat Take Extortion Public
ALPHV/BlackCat Take Extortion Public Content has been added to your Folio Go to Folio (0) close Ransomware Learn more about...
DarkGate Opens Organizations for Attack via Skype, Teams
Conclusion and recommendations In this case study, the attack was detected and contained before the actor could achieve their objectives....
Electric Power System Cybersecurity Vulnerabilities
Electric Power System Cybersecurity Vulnerabilities Content has been added to your Folio Go to Folio (0) close Cyber Threats Digitalization...
RedLine/Vidar Abuses EV Certificates, Shifts to Ransomware
Since June of this year, the CA/Browser Forum (CABF) — a public key infrastructure (PKI) industry group — made hardware...
TrickBot & Conti Sanctions: Implications for CISOs & Boardrooms
Recent sanctions imposed by the U.S. Treasury Department and the U.K. Foreign, Commonwealth & Development Office have drawn the attention...
Monti Ransomware Unleashes a New Encryptor for Linux
Table 1. The industries of the companies that appeared on the Monti ransomware leak site. Data is from March to...
An Overview of the New Rhysida Ransomware Targeting the Healthcare Sector
An Overview of the New Rhysida Ransomware Content has been added to your Folio Go to Folio (0) close Ransomware...
