Post GandCrab, Cybercriminals Scouring the Dark Web for the Next Top Ransomware
A recent study by Recorded Future found that the retirement of the GandCrab ransomware group earlier this year has created a ransomware demand vacuum on underground forums. The study indicates that around half of posts on underground forums are from cybercriminals looking for an alternative to the GandCrab ransomware-as-a-service solution.
Cybersecurity Has Become a Political Issue for Americans, Survey Shows
A new survey by Anomali shows that 87% of Americans think that cybersecurity is a crucial priority for the government, and only a little over half (51%) are satisfied with government efforts in this context. More than one in five people have been at the receiving end of a ransomware
‘Coordinated Ransomware Attack’ in Texas Hits 23 Local Governments
Since last Friday, an unidentified threat actor has launched a wave of ransomware attacks against government entities in Texas. The state’s Department of Information Resources (DIR) said that at least 23 entities were “actually or potentially impacted” by the “coordinated ransomware attack.” The affected organizations have not been identified. The
New Canon Survey Reveals Critical Gaps in Companies’ Cybersecurity Agenda
A new survey indicates that when it comes to cybersecurity, businesses are most concerned with the actions of their own staff. When asked about the biggest threat to their organization, 30% of respondents mentioned malicious insiders, and 25% said human error. Other threats that were given high priority were malware
Even DSLR cameras are vulnerable to ransomware
Check Point researchers have discovered that the unauthenticated Picture Transfer Protocol (PTP) puts some digital single-lens reflex (DSLR) cameras and certain mirrorless cameras at risk of ransomware attacks. An attacker within range of a vulnerable camera’s WiFi could use the PTP to infect the device with ransomware that encrypts all
Ransomware attacks on businesses up 365% this year
A new report by Malwarebytes confirms the resurgence of ransomware campaigns targeting companies. While various reports released in the first half of last year projected the decline of file-encrypting malware, threat actors have since then launched countless targeted campaigns. Between Q2 of 2018 and Q2 of this year, ransomware detections
Chinese government hackers suspected of moonlighting for profit
FireEye researchers have discovered that members of the notorious Chinese state-backed cyber espionage group APT41 are making money on the side by carrying out ransomware campaigns targeting game companies as well as other financially-motivated attacks. Sandra Joyce of FireEye says that “APT41 is unique among the China-Nexus actors we track
Vectra: Ransomware attacks are spreading to cloud, datacenter, and enterprise infrastructure
An extensive report on ransomware by Vectra highlights how ransomware actors turn compromised networks into their most powerful weapon during an attack, as it allows them to encrypt shared documents on network servers, including those stored in the cloud. Threat actors use this tactic to target firms like cloud
MegaCortex ransomware slams enterprise firms with $5.8 million blackmail demands
Security researchers with Accenture iDefense are tracking a new ransomware campaign that relies on a new version of the MegaCortex strain. The attacks focus on companies in the United States and across Europe and involve ransomware demands between $20,000 and $5.8 million. In previous versions of MegaCortex, the payload was
GermanWiper ransomware hits Germany hard, destroys files, asks for ransom
A destructive ransomware campaign is targeting users in Germany and to a lesser extent in other German-speaking countries. The ransomware, dubbed GermanWiper, is distributed via malicious emails (malspam) and as the name implies, it doesn’t encrypt files on infected systems, but permanently destroys them by rewriting the content with zeroes.