Ransomware – Page 44 – PossibleThreat Articles

Three stories here last week pored over several years’ worth of internal chat records stolen from the Conti ransomware group, the most profitable ransomware gang in operation today. The candid messages revealed how Conti evaded law enforcement and intelligence agencies, what it was like on a typical day at the Conti office, and how Conti secured the digital weaponry used in their attacks. This final post on the Conti conversations explores different schemes that Conti pursued to invest in and steal cryptocurrencies.

MalwareBytes Security

A week in security (February 28 – March 6)

March 7, 2022 0 Comments A week in security, chrome 99, Cisco, conti, crisis text line, deepfakes, hermeticwiper, malware, meta, NVIDIA, Podcast, Ransomware, toyota, trickbot, ukraine

Credit to Author: Malwarebytes Labs| Date: Mon, 07 Mar 2022 11:05:36 +0000

The most important and interesting security stories from the last seven days.

The post A week in security (February 28 – March 6) appeared first on Malwarebytes Labs.

Independent Krebs Security

Conti Ransomware Group Diaries, Part III: Weaponry

March 4, 2022 0 Comments A Little Sunshine, alarm, bentley, bio, bloodrush, chainalysis, cobalt strike, conti, grant, kaktus, lemans corporation, Ne'er-Do-Well News, pin, Ransomware, reshaev, revers, salamandra, skippy, the spaniard, tramp, trickbotleaks, trump

Credit to Author: BrianKrebs| Date: Fri, 04 Mar 2022 20:20:29 +0000

Part I of this series examined newly-leaked internal chats from the Conti ransomware group, and how the crime gang dealt with its own internal breaches. Part II explored what it’s like to be an employee of Conti’s sprawling organization. Today’s Part III looks at how Conti abused a panoply of popular commercial security services to undermine the security of their targets, as well as how the team’s leaders strategized for the upper hand in ransom negotiations with victims.

Security Sophos

Countermeasures and observability key to defending against attackers trying to buy security products

March 4, 2022 0 Comments conti, featured, Ransomware, security operations, sophos security

Credit to Author: Craig Jones| Date: Fri, 04 Mar 2022 17:42:45 +0000

The leak of Conti ransomware’s internal chat logs revealed the attackers tried to buy security software so they could figure out how to bypass it and avoid detection

MalwareBytes Security

HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine

March 4, 2022 0 Comments hermeticwiper, Ransomware, threat intelligence, wiper

Credit to Author: Threat Intelligence Team| Date: Fri, 04 Mar 2022 17:18:26 +0000

Hours before the invasion of Ukraine by Russian forces, a new piece of malware was launched at Ukrainian targets. In this blog post, we take apart its components and highlight its capabilities.

The post HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine appeared first on Malwarebytes Labs.

MalwareBytes Security

Nvidia, the ransomware breach with some plot twists

March 3, 2022 0 Comments hack back, haveibeenpwnd, lapsus, lhr, NVIDIA, password manager, passwords, Ransomware

Credit to Author: Pieter Arntz| Date: Thu, 03 Mar 2022 20:29:43 +0000

Nvidia got hacked by the LAPSUS$ ransomware group. On top of the ransom the threat actor had an extra demand and accused Nvidia of hacking back.

The post Nvidia, the ransomware breach with some plot twists appeared first on Malwarebytes Labs.

Independent Krebs Security

Conti Ransomware Group Diaries, Part II: The Office

March 2, 2022 0 Comments A Little Sunshine, bentley, bleeping computer, conti, emotet, hof, lawrence abrams, mango, Ne'er-Do-Well News, palo alto networks, Ransomware, reverse, ryuk, stern, The Coming Storm, trickbot

Credit to Author: BrianKrebs| Date: Wed, 02 Mar 2022 17:49:52 +0000

Earlier this week, a Ukrainian security researcher leaked almost two years’ worth of internal chat logs from Conti, one of the more rapacious and ruthless ransomware gangs in operation today. Tuesday’s story examined how Conti dealt with its own internal breaches and attacks from private security firms and governments. In Part II of this series we’ll explore what it’s like to work for Conti, as described by the Conti employees themselves.