Ransomware Archives

LockBit 3.0 Ransomware: An evolving threat that challenges network defenses and mitigations

Cybersecurity Attacks, Malware, Ransomware / Frank Crast / March 21, 2023 / ALPHV, BlackCat, BlackMatter, LockBit, LockBit Black, malware, RaaS, Ransomware

The FBI, CISA, and MS-ISAC have released a joint cybersecurity advisory regarding LockBit 3.0 ransomware as identified through FBI investigations as recently as this month.

LockBit 3.0 Ransomware: An evolving threat that challenges network defenses and mitigations Read More »

Royal Ransomware uses a unique “partial encryption approach” to evade detection

Cybersecurity Attacks, Malware, Phishing, Ransomware / Frank Crast / March 3, 2023 / CISA, Cobalt Strike, encryption, FBI, Ransomware, RMM, Royal, SysInternals, Zeon

CISA and FBI have published a joint cybersecurity alert on Royal ransomware used in recent cyberattacks as recently as January 2023. The ransomware uses a unique “partial encryption approach” to evade detection.

Royal Ransomware uses a unique “partial encryption approach” to evade detection Read More »

Clop: New Linux ransomware variant threat

Cybersecurity Attacks, Malware, Ransomware / Frank Crast / February 7, 2023 / Cl0p, Clop, Linux, Ransomware

Researchers from SentinelLabs have spotted the first Linux variant of Cl0p (aka “Clop”) ransomware, targeting Linux systems on December 26, 2022.

Clop: New Linux ransomware variant threat Read More »

Attackers exploit VMware ESXi RCE vulnerability to deliver ESXiArgs ransomware

Cybersecurity Attacks, Ransomware / Frank Crast / February 7, 2023 / CERT-FR, CVE-2021-21974, Cyberattack, ESXi, ESXiArgs, OpenSLP, VMware

French authorities and security researchers warn attackers have been exploiting two-year old VMware ESXi remote code execution (RCE) vulnerability (CVE-2021-21974) to deliver ESXiArgs ransomware.

Attackers exploit VMware ESXi RCE vulnerability to deliver ESXiArgs ransomware Read More »

Microsoft: RaaS attacks continue to evolve and expand

Cybersecurity Attacks, Malware, Ransomware / Frank Crast / February 2, 2023 / Batloader, BlackCat, LockBit, Microsoft, RaaS, Ransomware

Microsoft has been tracking over 100 threat actors using 50 unique active ransomware families in attacks around the globe.

Microsoft: RaaS attacks continue to evolve and expand Read More »

Vice Society ransomware gang targets manufacturing firms

Cybersecurity Articles, Cybersecurity Attacks, Malware, Ransomware / Frank Crast / February 1, 2023 / FiveHands, Hello Kitty, PrintNightmare, Ransomware, Vice Society, Zeppelin

Vice Society ransomware gang has been targeting manufacturing firms in Brazil, Argentina, Switzerland, and Israel, with their own custom-built ransomware.

Vice Society ransomware gang targets manufacturing firms Read More »

The Guardian closes offices after ransomware attack last month

Cybersecurity Attacks, Malware, Ransomware / Frank Crast / January 4, 2023 / Cyberattack, malware, Ransomware, The Guardian

Leading British newspaper The Guardian has temporarily closed offices after a ransomware attack reported last month.

The Guardian closes offices after ransomware attack last month Read More »

Agenda Ransomware gang uses Rust to target more companies worldwide

Cybersecurity Attacks, Malware, Ransomware / Frank Crast / December 20, 2022 / Agenda, Go, Ransomware, ransomware-as-a-service, RUST

A ransomware-as-a-service group has released a new variant of Agenda ransomware written in Rust, designed to target more companies from different countries. The group has also posted company victims online, threatening to publish private files.

Agenda Ransomware gang uses Rust to target more companies worldwide Read More »

Cuba ransomware attacks on the rise with new exploits

Cybersecurity Articles, Malware, Ransomware, Vulnerabilities & Exploits / Frank Crast / December 4, 2022 / C2, CISA, Cuba, CVE-2020-1472, CVE-2022-24521, FBI, H0lyGh0st, KerberCache, Kerberoasting, LockBit, malware, Ransomware, RomCom, Spy Marketplace, Zeppelin

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have released a joint Cybersecurity Advisory (CSA) with new details regarding Cuba Ransomware attacks.

Cuba ransomware attacks on the rise with new exploits Read More »

Zeppelin Ransomware threatens wide range of businesses and critical infrastructure organizations

Cybersecurity Attacks, Malware, Ransomware / Frank Crast / August 16, 2022 / #StopRansomware, CISA, FBI, Ransomware, Vega, Zeppelin

The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have issued a joint cybersecurity advisory on Zeppelin Ransomware.

Zeppelin Ransomware threatens wide range of businesses and critical infrastructure organizations Read More »