23 May 2022

ransomware

Canadian NetWalker Ransomware Operator Extradited to U.S ransomware attack
2 min read

Canadian NetWalker Ransomware Operator Extradited to U.S

RiSec 11 March 2022
Charges against the individual – Sebastien Vachon-Desjardins, 34, of Gatineau, Quebec, Canada – were announced last year, when law enforcement authorities in the U.S. and Europe seized the dark web sites used in the NetWalker ransomware operations. Offered under the ransomware-as-a-service (RaaS) business model, NetWalker – also known as Malito – emerged in 2019 and has been involved in a variety of high-profile attacks, including ones targeting education, government, health, and public transportation organizations. The U.S. Department of Justice said that dozens of entities worldwide were hit by NetWalker, which “specifically...
Continue Reading
Ragnar Locker Ransomware Breached 52+ Orgs Across 10 Critical Infrastructure Sectors ransomware
2 min read

Ragnar Locker Ransomware Breached 52+ Orgs Across 10 Critical Infrastructure Sectors

RiSec 8 March 2022
The US FBI warns that the Ragnar Locker ransomware gang has breached the networks of at least 52 organizations from multiple US critical infrastructure sectors. The US Federal Bureau of Investigation (FBI) and CISA published a flash alert to warn that the Ragnar Locker ransomware gang has breached the networks of at least 52 organizations across 10 critical infrastructure sectors. The ransomware operation has been active since late December 2019, this is the second time that the FBI first shares IoC related to RagnarLocker operation, the FBI first became aware of this threat...
Continue Reading
Ransomware gangs, hackers pick sides over Russia invading Ukraine Ransomware gangs, hackers pick sides over Russia invading Ukraine
3 min read

Ransomware gangs, hackers pick sides over Russia invading Ukraine

RiSec 25 February 2022
Hacker crews are picking sides as the Russian invasion into Ukraine continues, issuing bans and threats for supporters of the opposite side. This week, an administrator of the database sharing and marketplace Raidforums announced that it would close its door on users connecting from Russia, clearly expressing their position against Kremlin’s actions. Earlier today, the Conti ransomware group stated their “full support of Russian government” and threatened with cyberattacks against anyone launching attacks against Russia. Hackers react Hackers, state-backed or not, have already launched cyberattacks, most of them against...
Continue Reading
Microsoft, Apple and Google top the list of the most spoofed brands in 2021 most spoofed brands in 2021
4 min read

Microsoft, Apple and Google top the list of the most spoofed brands in 2021

RiSec 23 February 2022
IBM’s 2022 X-Force Threat Intelligence Index also revealed that ransomware was again the top attack type last year and that manufacturing supply chains were most vulnerable to exploitation Microsoft, Apple and Google were the top three brands criminals attempted to mimic in 2021, according to IBM’s newly released X-Force Threat Intelligence Index. The industry-leading brands were used repeatedly in phishing kits, with attackers likely seeking to capitalize on their popularity and consumers’ trust, the Index said. Cybercriminals used the brands as a disguise to steal consumers’ information or infect their...
Continue Reading
Beware of the black cat ransomware: Dangerous and on the prowl Black cat ransomware
3 min read

Beware of the black cat ransomware: Dangerous and on the prowl

RiSec 17 February 2022
Black Cat Ransomware: During February 2022,  Swissport was hit by a ransomware attack and the consequence of this led to flight delays and service disruption. BlackCat ransomware has now claimed they were behind the attack and stole data containing images of passports, internal business memos and personal information of job candidates. Dubbed by some security analysts to be the “most sophisticated” ransomware group of 2021, BlackCat ransomware has already become quite infamous within the cybersecurity community. Earlier in February, some of its members confirmed the group was linked to the notorious BlackMatter...
Continue Reading
$400 million of ransomware revenue went to Russia-linked groups in 2021 400 million of ransomware revenue
4 min read

$400 million of ransomware revenue went to Russia-linked groups in 2021

RiSec 17 February 2022
Blockchain analysis shows that funds paid in extortion are laundered through services primarily catering to Russian users. Recently published research by Chainalysis shows that a staggering 74% of all ransomware revenue went to threat actors affiliated with Russia last year. In other words, around $400 million worth of cryptocurrency ended up filling the pockets of cyber criminals connected to Russia in some form. Unsurprisingly, researchers claim that Moscow’s financial district plays a critical role in soliciting money laundering activities for cybercriminals. How do they know? Researchers tie specific ransomware strains to...
Continue Reading
AU: Hackers face 25 years’ jail for ransomware attacks on critical infrastructure MFA
4 min read

AU: Hackers face 25 years’ jail for ransomware attacks on critical infrastructure

RiSec 17 February 2022
Cryptocurrency seizure in the bill, plus other new offences. Hackers will face up to 25 years’ jail for deliberately targeting critical infrastructure assets under proposed changes to Australia’s computer offences designed to stem the rise in ransomware attacks against businesses. The new laws will also give federal police “clear legal authority” to investigate and prosecute gangs operating offshore, and the ability to seize cryptocurrencies and other digital assets during the course of an investigation. The proposed amendments are contained in the Crimes Legislation Amendment (Ransomware Action Plan) Bill 2020 introduced to...
Continue Reading
San Francisco 49ers confirm ransomware attack ransomware attack
3 min read

San Francisco 49ers confirm ransomware attack

RiSec 13 February 2022
The San Francisco 49ers NFL team has fallen victim to a ransomware attack that encrypted files on its corporate IT network, a spokesperson for the team has told The Record. The team confirmed the attack earlier today after the operators of the BlackByte ransomware listed the team as one of their victims on Saturday on a dark web “leak site” the group typically uses to shame victims and force them into paying their extortion demands. “Upon learning of the incident, we immediately initiated an investigation and took steps to contain...
Continue Reading
Buy an SSD while they’re still cheap: Contamination ruins 6.5 billion GBs buy ssd cheap
2 min read

Buy an SSD while they’re still cheap: Contamination ruins 6.5 billion GBs

RiSec 12 February 2022
Western Digital and Kioxia cut production at two plants in Japan after contamination was discovered in raw materials, which will likely lead to price hikes and further strain on the already-taxed supply chain. Western Digital and Kioxia are some of the largest producers of flash memory in the industry. Contaminated materials in plants at Yokkaichi and Kitakami have led to limited production of flash memory, which is expected to impact the rest of the industry. According to a report from Bloomberg, it isn’t clear how extensive the disruption will be. Western Digital...
Continue Reading
Data of Puma Employees Stolen in Kronos Ransomware Attack CyberSecurity
2 min read

Data of Puma Employees Stolen in Kronos Ransomware Attack

RiSec 8 February 2022
Data of 6,632 Puma employees was stolen in a December 2021 ransomware attack that hit HR management platform Ultimate Kronos Group (UKG). Identified on December 11, the attack targeted Kronos Private Cloud, a service on which UKG runs applications such as Banking Scheduling Solutions, Healthcare Extensions, UKG TeleStaff, and UKG Workforce Central. Kronos immediately launched an investigation into the attack and last month discovered that Puma was one of the customers impacted by the incident. “Regrettably, this letter is to inform you that we were recently the victim of a ransomware attack...
Continue Reading
Cyber Knowledge Base

You may have missed

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog Avast, AVG Release Security Updates for Decade-Old Vulnerability
3 min read

CISA adds CVE-2022-30525 flaw in Zyxel Firewalls to its Known Exploited Vulnerabilities Catalog

17 May 2022
Over 200 Apps on Play Store Caught Spying on Android Users Using Facestealer google-play-store-malware
3 min read

Over 200 Apps on Play Store Caught Spying on Android Users Using Facestealer

17 May 2022
Killnet hackers announce Russian cyber attacks on UK for standing up to Putin’s war cybersecurity news
2 min read

Killnet hackers announce Russian cyber attacks on UK for standing up to Putin’s war

16 May 2022
Brazilian e-commerce firm Americanas reports multimillion-dollar loss following cyberattack CyberSecurity
2 min read

Brazilian e-commerce firm Americanas reports multimillion-dollar loss following cyberattack

16 May 2022
en English
af Afrikaanssq Albanianam Amharicar Arabichy Armenianaz Azerbaijanieu Basquebe Belarusianbn Bengalibs Bosnianbg Bulgarianca Catalanceb Cebuanony Chichewazh-CN Chinese (Simplified)zh-TW Chinese (Traditional)co Corsicanhr Croatiancs Czechda Danishnl Dutchen Englisheo Esperantoet Estoniantl Filipinofi Finnishfr Frenchfy Frisiangl Galicianka Georgiande Germanel Greekgu Gujaratiht Haitian Creoleha Hausahaw Hawaiianiw Hebrewhi Hindihmn Hmonghu Hungarianis Icelandicig Igboid Indonesianga Irishit Italianja Japanesejw Javanesekn Kannadakk Kazakhkm Khmerko Koreanku Kurdish (Kurmanji)ky Kyrgyzlo Laola Latinlv Latvianlt Lithuanianlb Luxembourgishmk Macedonianmg Malagasyms Malayml Malayalammt Maltesemi Maorimr Marathimn Mongolianmy Myanmar (Burmese)ne Nepalino Norwegianps Pashtofa Persianpl Polishpt Portuguesepa Punjabiro Romanianru Russiansm Samoangd Scottish Gaelicsr Serbianst Sesothosn Shonasd Sindhisi Sinhalask Slovaksl Slovenianso Somalies Spanishsu Sudanesesw Swahilisv Swedishtg Tajikta Tamilte Teluguth Thaitr Turkishuk Ukrainianur Urduuz Uzbekvi Vietnamesecy Welshxh Xhosayi Yiddishyo Yorubazu Zulu