Think, Talk, Hack

Browsing tag

ransomware

Ransomware Attackers Partnering With Cybercrime Groups to Hack High-Profile Targets

As ransomware attacks against critical infrastructure skyrocket, new research shows that threat actors behind such disruptions are increasingly shifting from using email messages as an intrusion route to purchasing access from cybercriminal enterprises that have already infiltrated major targets. “Ransomware operators often buy access from independent cybercriminal groups who infiltrate major targets and then sell […]

root

Experts Shed Light On Distinctive Tactics Used by Hades Ransomware

Cybersecurity researchers on Tuesday disclosed “distinctive” tactics, techniques, and procedures (TTPs) adopted by operators of Hades ransomware that set it apart from the rest of the pack, attributing it to a financially motivated threat group called GOLD WINTER. “In many ways, the GOLD WINTER threat group is a typical post-intrusion ransomware threat group that pursues […]

root

Emerging Ransomware Targets Dozens of Businesses Worldwide

An emerging ransomware strain in the threat landscape claims to have breached 30 organizations in just four months since it went operational, riding on the coattails of a notorious ransomware syndicate. First observed in February 2021, “Prometheus” is an offshoot of another well-known ransomware variant called Thanos, which was previously deployed against state-run organizations in […]

root

Beef Supplier JBS Paid Hackers $11 Million Ransom After Cyberattack

Meat processing company JBS on Wednesday confirmed it paid extortionists $11 million in bitcoins to regain access to its systems following a destructive ransomware attack late last month. “In consultation with internal IT professionals and third-party cybersecurity experts, the company made the decision to mitigate any unforeseen issues related to the attack and ensure no […]

root

FBI recovers millions in ransom from DarkSide ransomware gang

The DarkSide ransomware gang was behind the attack on Colonial Pipeline, the largest fuel pipeline in the United States – The recovered ransom payment also belongs to the Pipeline.  A live-streamed joint press conference from the US Department of Justice (DoJ) and the FBI revealed that $2.3 million worth of cryptocurrency had been recovered from […]

root

How gamers should secure their accounts from cyber attacks

Gaming is a multi-billion industry that is why it is a lucrative target for cybercriminals as well. Gaming giants on the other hand have resources to protect their cyber infrastructure from cyberattacks but what about naive gamers with no knowledge of cybersecurity? It is a fact that gamers are under constant threat of phishing, malware, […]

root

5 Top Cybersecurity Threats to Businesses

Cybersecurity threats are unpredictable but taking a closer look at them and implementing proper security measures seems like a wise decision. The technology that we use today comes with a lot of benefits for businesses. For instance, it allows them to get instant feedback from their customers, increase their brand recognition, and reach a larger […]

root

Data Wiper Malware Disguised As Ransomware Targets Israeli Entities

Researchers on Tuesday disclosed a new espionage campaign that resorts to destructive data-wiping attacks targeting Israeli entities at least since December 2020 that camouflage the malicious activity as ransomware extortions. Cybersecurity firm SentinelOne attributed the attacks to a nation-state actor affiliated with Iran it tracks under the moniker “Agrius.” “An analysis of what at first […]

root

Watch out as fake ransomware attack infects PCs with StrRAT

StrRAT malware has the ability to steal credentials from a targeted system and also change file name extension to .crimson but it does not encrypt any data like in a ransomware attack. In recent malware-related news, Microsoft took to Twitter to warn users against a Java-based StrRAT that essentially portrays it to be fake ransomware […]

root

Insurance Firm CNA Financial Reportedly Paid Hackers $40 Million in Ransom

U.S. insurance giant CNA Financial reportedly paid $40 million to a ransomware gang to recover access to its systems following an attack in March, making it one the most expensive ransoms paid to date. The development was first reported by Bloomberg, citing “people with knowledge of the attack.” The adversary that staged the intrusion is […]

root

Microsoft Warns of Data Stealing Malware That Pretends to Be Ransomware

Microsoft on Thursday warned of a “massive email campaign” that’s pushing a Java-based STRRAT malware to steal confidential data from infected systems while disguising itself as a ransomware infection. “This RAT is infamous for its ransomware-like behavior of appending the file name extension .crimson to files without actually encrypting them,” the Microsoft Security Intelligence team […]

root

DarkSide Ransomware Gang Extorted $90 Million from Several Victims in 9 Months

DarkSide, the hacker group behind the Colonial Pipeline ransomware attack earlier this month, received $90 million in bitcoin payments following a nine-month ransomware spree, making it one of the most profitable cybercrime groups. “In total, just over $90 million in bitcoin ransom payments were made to DarkSide, originating from 47 distinct wallets,” blockchain analytics firm […]

root

DarkSide ransomware call it quits after Bitcoin, servers are seized

DarkSide Ransomware gang was behind the recent Colonial Pipeline cyberattack however it is unclear who is behind the seizure of DarkSide’s cyberinfrastructure. The DarkSide ransomware cybercriminals group involved in the six-day outage at Colonial Pipeline last week that led to fuel shortages and price spikes across the United States is calling it quits. The crime […]

root

Colonial Pipeline Paid Nearly $5 Million in Ransom to Cybercriminals

Colonial Pipeline on Thursday restored operations to its entire pipeline system nearly a week following a ransomware infection targeting its IT systems, forcing it to reportedly shell out nearly $5 million to restore control of its computer networks. “Following this restart, it will take several days for the product delivery supply chain to return to […]

root

Ransomware Gang Leaks Metropolitan Police Data After Failed Negotiations

The cybercrime syndicate behind Babuk ransomware has leaked more personal files belonging to the Metropolitan Police Department (MPD) after negotiations with the DC Police broke down, warning that they intend to publish all data if their ransom demands are not met. “The negotiations reached a dead end, the amount we were offered does not suit […]

root

U.S. Declares Emergency in 17 States Over Fuel Pipeline Cyber Attack

The ransomware attack against Colonial Pipeline’s networks has prompted the U.S. Federal Motor Carrier Safety Administration (FMCSA) to issue a regional emergency declaration in 17 states and the District of Columbia (D.C.). The declaration provides a temporary exemption to Parts 390 through 399 of the Federal Motor Carrier Safety Regulations (FMCSRs), allowing alternate transportation of […]

root

Ransomware Cyber Attack Forced the Largest U.S. Fuel Pipeline to Shut Down

Colonial Pipeline, which carries 45% of the fuel consumed on the U.S. East Coast, on Saturday said it halted operations due to a ransomware attack, once again demonstrating how infrastructure is vulnerable to cyber attacks. “On May 7, the Colonial Pipeline Company learned it was the victim of a cybersecurity attack,” the company said in […]

root

Researchers Uncover Iranian State-Sponsored Ransomware Operation

Iran has been linked to yet another state-sponsored ransomware operation through a contracting company based in the country, according to new analysis. “Iran’s Islamic Revolutionary Guard Corps (IRGC) was operating a state-sponsored ransomware campaign through an Iranian contracting company called ‘Emen Net Pasargard’ (ENP),” cybersecurity firm Flashpoint said in its findings summarizing three documents leaked […]

root

Ransomware attack disrupts Metro Vancouver’s payment systems

The payments systems remained ineffective for three days after the ransomware attack, but payment data is safe, claims TransLink. TransLink, the agency that manages the transit system of Metro Vancouver, has become the latest victim of a ransomware attack. According to reports, the Metro’s payment systems were targeted by Egregor ransomware operators, after which the […]

root