hive – PossibleThreat Articles

Clustering attacker behavior reveals hidden patterns

August 8, 2023 0 Comments black basta, featured, hive, mdr, Ransomware, royal, sophos x-ops, tac, threat activity cluster, threat research

Credit to Author: Andrew Brandt| Date: Tue, 08 Aug 2023 10:00:11 +0000

A collection of very specific behaviors, observed by Sophos X-Ops incident response analysts in the lead-up to four separate ransomware attacks in the first quarter of 2023, indicates an unexpected connection between the attacks. In the parlance of the Managed Detection and Response (MDR) team, the peculiarly similar details constitute a threat activity cluster that […]

Security Sophos

US offers $10m bounty for Russian ransomware suspect outed in indictment

May 17, 2023 0 Comments #babuk, bust, doj, hive, Law & order, lockbit, Ransomware

Credit to Author: Naked Security writer| Date: Wed, 17 May 2023 16:40:11 +0000

“Up to $10 million for information that leads to the arrest and/or conviction of this defendant.”

Security Sophos

S3 Ep120: When dud crypto simply won’t let go [Audio + Text]

February 2, 2023 0 Comments collision, Cryptography, hive, Law & order, MD5, Naked Security Podcast, Podcast, Ransomware, samba, vulnerability

Credit to Author: Paul Ducklin| Date: Thu, 02 Feb 2023 17:50:29 +0000

Latest episode – listen now!

MalwareBytes Security

Hive! Hive! Hive! Ransomware site submerged by FBI

January 28, 2023 0 Comments doj, europol, FBI, hive, news, patch management, phishing, Ransomware, RDP, vulnerability

Categories: News

Categories: Ransomware

Tags: DoJ

Tags: FBI

Tags: Europol

Tags: HIve

Tags: ransomware

Tags: RDP

Tags: Patch management

Tags: Vulnerability

Tags: phishing

The DoJ, FBI, and Europol have released details about a months-long international disruption campaign against the Hive ransomware group

(Read more…)

The post Hive! Hive! Hive! Ransomware site submerged by FBI appeared first on Malwarebytes Labs.

Security Sophos

Hive ransomware servers shut down at last, says FBI

January 27, 2023 0 Comments doj, FBI, hive, Law & order, raas, Ransomware, takedown

Credit to Author: Naked Security writer| Date: Fri, 27 Jan 2023 17:58:57 +0000

Unfortunately, you’ve probably already heard the cliche that “cybercrime abhors a vacuum”…

MalwareBytes Security

A week in security (December 5 – 11)

December 12, 2022 0 Comments android vulnerability, Apple, apple airtag, bluetooth, dustin childs, epic games, eufy, facebook hoax, festive scam, Google Chrome, hive, holiday scams, lazarus group, lock & code, lock and code, lock and code s03e25, news, paypal phish, s03e25, saas, saas best practices, sim swapper, snapchat, threat intelligence reports, v8 vulnerability

Categories: News

Tags: Lock and Code S03E25

Tags: lock & code

Tags: lock and code

Tags: S03E25

Tags: Dustin Childs

Tags: Eufy

Tags: Snapchat

Tags: Apple

Tags: Apple AirTag

Tags: Google Chrome

Tags: V8 vulnerability

Tags: Hive

Tags: Facebook hoax

Tags: PayPal phish

Tags: Lazarus Group

Tags: SIM swapper

Tags: festive scam

Tags: holiday scams

Tags: Android vulnerability

Tags: Bluetooth

Tags: SaaS

Tags: SaaS best practices

Tags: Epic Games

Tags: Threat Intelligence Reports

The most interesting security related news from the week of December 5 to 11.

(Read more…)

The post A week in security (December 5 – 11) appeared first on Malwarebytes Labs.

Security Sophos

Lockbit, Hive, and BlackCat attack automotive supplier in triple ransomware attack

August 10, 2022 0 Comments active adversary playbook, blackcat, featured, hive, lockbit, Ransomware, security operations, sophos x-ops

Credit to Author: Matt Wixey| Date: Wed, 10 Aug 2022 11:00:50 +0000

After gaining access via RDP, all three threat actors encrypted files, in an investigation complicated by event log clearing and backups. 3 attackers, 2 weeks – 1 entry point.

Security Sophos

Multiple attackers increase pressure on victims, complicate incident response

August 9, 2022 0 Comments active adversary playbook, blackcat, conti, cryptominers, featured, hive, iabs, karakurt, lockbit, Ransomware, security operations, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Tue, 09 Aug 2022 11:00:04 +0000

Sophos’ latest Active Adversary report explores the issue of organizations being hit multiple times by attackers

MalwareBytes Security

Ransomware review: July 2022

August 4, 2022 0 Comments 0mega, bianlian, blackbasta, cheers, conti, hive, july 2022, karakurt, lockbit, Ransomware, redalert, threat intelligence, yanluowang

Credit to Author: Threat Intelligence Team| Date: Thu, 04 Aug 2022 20:48:37 +0000

BlackBasta lined up behind LockBit as the second most prevalent ransomware in July, a number of new gangs appeared, and an old one reappeared

The post Ransomware review: July 2022 appeared first on Malwarebytes Labs.

Microsoft Security

Hive ransomware gets upgrades in Rust

July 5, 2022 0 Comments cybersecurity, hive, Microsoft security intelligence, mstic, Ransomware, Ransomware as a Service

Credit to Author: Microsoft 365 Defender Threat Intelligence Team| Date: Tue, 05 Jul 2022 16:00:00 +0000

With its latest variant carrying several major upgrades, Hive proves it’s one of the fastest evolving ransomware payload, exemplifying the continuously changing ransomware ecosystem.

The post Hive ransomware gets upgrades in Rust appeared first on Microsoft Security Blog.

← Previous