Temasec Ransomware Archives

Category Archives: Ransomware

Ransom Gangs Emailing Victim Customers for Leverage

April 5 2021 By BrianKrebs in Emsisoft, Fabian Wosar, Lawrence Abrams, Ransomware, rEvil, Security, The Coming Storm

Some of the top ransomware gangs are deploying a new pressure tactic to push more victim organizations into paying an extortion demand: Emailing the victim's customers and partners directly,...

Naked Security Live – Lessons beyond ransomware

March 29 2021 By Paul Ducklin in Exploit, Malware, Ransomware, Security, Vulnerability

Cybercrime isn't about just one sort of attack, one type of crook, or one method of protection!

S3 Ep25: Drained accounts, ransomware attacks and Linux badware [Podcast]

March 25 2021 By Paul Ducklin in Linux, Malware, Podcast, Ransomware, Security, Twitter, Vulnerability

New episode - listen now!

BlackKingdom ransomware still exploiting insecure Exchange servers

March 23 2021 By Paul Ducklin in Ransomware, Security, Vulnerability

Remember Hafnium? Here's the bad news - it's not over yet! Learn why and what to do...

Payroll/HR Giant PrismHR Hit by Ransomware?

March 2 2021 By BrianKrebs in Ransomware, Security

PrismHR, a company that sells software and services used by other firms to help more than 80,000 small businesses manage payroll, benefits, and human resources, has suffered what appears...

Search crimes – how the Gootkit gang poisons Google searches

March 2 2021 By Paul Ducklin in Malware, Ransomware, Security

When a search result looks too good to be true - it IS too good to be true!

So Unchill: Melting UNC2198 ICEDID to Ransomware Operations

February 25 2021 By Daniel Pany in Bryce Abdo, Homepage Carousel, Latest Blog Posts, Mandiant, Ransomware, Security, Threat Research, Van Ta

Mandiant Advanced Practices (AP) closely tracks the shifting tactics, techniques, and procedures (TTPs) of financially motivated groups who severely disrupt organizations with ransomware. In May 2020, FireEye ...

So Unchill: Melting UNC2198 ICEDID to Ransomware Operations

February 25 2021 By Daniel Pany in Bryce Abdo, Homepage Carousel, Latest Blog Posts, Mandiant, Ransomware, Security, Threat Research, Van Ta

Cyber Criminals Exploit Accellion FTA for Data Theft and Extortion

February 22 2021 By Daniel Pany in Andrew Moore, data theft, Genevieve Stark, Homepage Carousel, Kimberly Goody, Latest Blog Posts, Mandiant, Ransomware, Security, Threat Research, Van Ta, vulnerabilities

Starting in mid-December 2020, malicious actors that Mandiant tracks as UNC2546 exploited multiple zero-day vulnerabilities in Accellion’s legacy File Transfer Appliance (FTA) to install a newly discovered...