Credit to Author: Matt Wixey| Date: Mon, 04 Mar 2024 11:00:08 +0000
First released in May 2023, an EDR killer – and the vulnerable Zemana drivers it leverages – are still of interest to threat actors, along with variants and ported versions
Read more
Credit to Author: BrianKrebs| Date: Thu, 29 Feb 2024 22:18:54 +0000
The ransomware group LockBit told officials with Fulton County, Ga. they could expect to see their internal documents published online this morning unless the county paid a ransom demand. Instead, LockBit removed Fulton County’s listing from its victim shaming website this morning, claiming county officials had paid. But county officials said they did not pay, nor did anyone make payment on their behalf. Security experts say LockBit was likely bluffing and probably lost most of the data when the gang’s servers were seized this month by U.S. and U.K. law enforcement.
Read moreCISA, FBI and HHS are warning about the ALPHV/ Blackcat ransomware group targeting the healthcare industry.
Read moreThe cyberattack on Change Healthcare that has been causing a lot of disruptions is likely the work of the BlackCat/ALPHV ransomware gang.
Read more
Credit to Author: Andrew Brandt| Date: Fri, 23 Feb 2024 10:40:38 +0000
Multiple attacks exploit vulnerabilities in an IT remote access tool to deliver a variety of different payloads into business environments
Read more
Credit to Author: BrianKrebs| Date: Mon, 26 Feb 2024 02:17:55 +0000
The FBI’s takedown of the LockBit ransomware group last week came as LockBit was preparing to release sensitive data stolen from government computer systems in Fulton County, Ga. But LockBit is now regrouping, and the gang says it will publish the stolen Fulton County data on March 2 unless paid a ransom. LockBit claims the cache includes documents tied to the county’s ongoing criminal prosecution of former President Trump, but court watchers say teaser documents published by the crime gang suggest a total leak of the Fulton County data could put lives at risk and jeopardize a number of other criminal trials.
Read more
Credit to Author: Chester Wisniewski| Date: Wed, 21 Feb 2024 20:01:20 +0000
Making sense of the ransomware-group takedown — what it means for ransomware and law enforcement
Read more
Credit to Author: BrianKrebs| Date: Tue, 20 Feb 2024 17:09:00 +0000
U.S. and U.K. authorities have seized the darknet websites run by LockBit, a prolific and destructive ransomware group that has claimed more than 2,000 victims worldwide and extorted over $120 million in payments. Instead of listing data stolen from ransomware victims who didn’t pay, LockBit’s victim shaming website now offers free recovery tools, as well as news about arrests and criminal charges involving LockBit affiliates.
Read more