Exotic Lilly An Initial Access Broker for Conti
Google’s TAG has disvovered a financially motivated threat actor working as an intermediary for the Russian hackers, including the Conti ransomware gang. The group, dubbed “Exotic Lily,” acts as an…
Ryuk exploits MSHTML Bug
The MSHTML zero day bug in Windows that Microsoft patched recently has been in use by attackers exploiting the bug by a highly active ransomware group. Microsoft issued an advisory…
Ryuk Invaded via Pirate
Ryuk ransomware, has been targeting hospital and healthcare providers over the last year, The path of infection for most ransomware is using phishing, followed by targeting servers with vulnerabilities. But…
Posted inBackdoor cybersecurity Encryption
Ryuk Attack Anatomy
This report illustrates some of the new and existing Tactics, Techniques, and Procedures (TTPs) of the Ryuk ransomware variants Initial Access: RDP Brute Force / Phising Initial access is based…
Ryuk Ransomware New Varient
ANSSI have spotted a new Ryuk ransomware variant that implements worm-like capabilities that allow within local networks. This version holds a new attribute allowing it to self replicate over the…
Posted incybersecurity Data Breaches Endpoint Security
Sopra Steria Ransomware estimated loss
French IT outsourcer Sopra Steria has been hit by a ransomware attack. While the company did not reveal the family of malware that infected its systems, local media speculate the…
Posted incybersecurity Data Breaches Endpoint Security
Sopra Steria …. Ryuked.. Services down
IT services provider Sopra Steria has confirmed that it was hit by a “new version” of the Ryuk ransomware that was “previously unknown to antivirus software providers and security agencies”.…
Microsoft takes down election hacking
Microsoft has disrupted a massive hacking operation that it said could have indirectly affected election infrastructure. The company said Monday it took down the servers behind Trickbot, an enormous malware…