Qakbot 🐎 ->Prolock ☠️-> Egregor 👹
Group-IB discovered that QakBot (aka Qbot) operators have abandoned ProLock for Egregor ransomware. ProLock = Egregor The analysis of attacks where Egregor has been deployed revealed that the TTPs used…
Malware service providers arrested
The malware encryption service run by a Romanian based in Craiova and Bucharest duo helped hackers embed malicious code in legit software to bypass antivirus tools. The pair ran online…
Posted incloudsecurity
Microsoft rolls out Protection to kitty critical accounts
Microsoft has launched Office 365 priority protection for accounts of high-profile employees such as executive-level managers who are most often targeted by threat actors. The new feature was added to MS defender ATP…
Manchester United FC Attacked
disclosed a cyber attack, but according to the football club it is not “currently aware of any breach of personal data associated with our fans and customers”. The club confirmed…
Cicada 🐞Chinese sponsered
The hackers, most likely from a well-known group that’s funded by the Chinese government, are outfitted with both off-the-shelf and custom-made tools. One such tool exploits Zerologon,that can give attackers…
Posted incloudsecurity
APT Predictions 2020 As it happened..Predicting 2021
Trying to make predictions about the future is a tricky business. As per the researchers what they predicted and what is happened.. and what going to happen they elobrated The…
Egregor strikes printers
The Egregor ransomware uses a novel approach to get a victim's attention after an attack - shoot ransom notes from all available printers. Ransomware gangs know that many businesses would…
Posted incloudsecurity
Cisco WebEx bug invites Ghost users 🤡
The increase in usage of remote conference also brings the question of security and data privacy. Researchers at IBM analysed one such popular offering, Cisco’s Webex, and discovered three vulnerabilities…