Evil Corp’s WastedLocker Demanding Millions of Dollars for Decryption
What happens when one of the most prolific and infamous financially motivated cybercriminal organizations decides to develop a new ransomware strain? Unfortunately for us, this can be answered without conjecture or assumptions. Infamous cybercriminal organization Evil Corp, best known for the Dridex banking malware, answered that question for us in ... Read More
Stuck Between a Data Breach and a Ransom
2020 will be remembered for a whole host of reasons. Campfire stories will be told to grandchildren of when we all had to wear face masks, stand 2 meters apart and were not allowed to hug or shake hands. For those who hunt cybercriminals and attempt to shine a light ... Read More
Snake Ransomware Slithers Into the Light
For large portions of the population, targeting healthcare organizations during a global pandemic is a step too far. It is hard to justify the actions of ransomware gangs at the best of times, but attacks on organizations that are the front line against the COVID-19 health emergency is beyond the ... Read More
Hospitals Forced to Fight Another Pandemic
The current upsurge in hackers looking to take advantage of the COVID-19 pandemic has been well-documented, be they scammers and financially motivated hackers or well-funded and skilled state-sponsored groups. This in itself does not say much about the ethical foundation those hackers have. But, this has come to be expected ... Read More
MedusaLocker Leaves No Network Drive Safe
As it stands, ransomware is the cybersecurity problem that refuses to disappear. What started as malware specifically targeting home users is now targeting government departments and enterprise organizations. Not even Fortune 500 companies are safe from being infected, despite often having dedicated security staff. The reasons for ransomware’s continued rise ... Read More
Ryuk: Cult Character to Ransomware Villain
If a fan of anime or manga is asked their thoughts on Ryuk, a long discussion about the character popularized in Death Note will undoubtedly follow. Ask someone in the InfoSec community about Ryuk and equally long discussion will ensue—this time an equally interesting lecture about the plot, villains and ... Read More
Buran Ransomware Looks To Undercut the Competition
Recent research estimates that ransomware attacks against enterprises have increased year on year by approximately 500%. Given that Cyber Monday and Black Friday are within striking distance, a surge in ransomware infections should be not only expected but also actively defended against. One ransomware variant that can be expected to ... Read More
Sodinokibi and the Successful Tactics it Uses
Research by security firms places Ryuk and Sodinokibi as two of the prime ransomware threats facing enterprises today. While some reports illustrate ransomware infections across the board, ransom amounts have almost tripled from quarter to quarter for the first half of 2019. Sodinokibi is one of these prime agitators demanding ... Read More
Maze Ransomware Exploiting Exploit Kits
Cybercrime has never been one to hem in tactics with ideology or rules. Rather, malware operators are known to use what works and then modify code to continue to work. By “work,” we mean that the code does what it is supposed to; for information stealers, the work done will ... Read More
Muhstik Ransomware: A Hack-Back Story
Since 2010 users have been plagued by nearly uncountable versions of a seemingly uncountable variety of ransomware variants. While tactics have changed, including infection vectors, the goal of ransomware has remained the same: Namely, to render a machine unusable to the victim that they feel obliged to pay the ransom ... Read More
