Attack tool update impairs Windows computers
Credit to Author: Andrew Brandt| Date: Tue, 27 Aug 2024 16:33:35 +0000
An EDR killer Sophos X-Ops has tracked for three years continues to bedevil organizations targeted by ransomware gangs.
Read morelockbit
The Not-So-Secret Network Access Broker x999xx
Credit to Author: BrianKrebs| Date: Wed, 03 Jul 2024 16:41:34 +0000
Most accomplished cybercriminals go out of their way to separate their real names from their hacker handles. But among certain old-school Russian hackers it is not uncommon to find major players who have done little to prevent people from figuring out who they are in real life. A case study in this phenomenon is “x999xx,” the nickname chosen by a venerated Russian hacker who specializes in providing the initial network access to various ransomware groups.
Read more[updated] Federal Reserve “breached” data may actually belong to Evolve Bank
LockBit claimed to have breached Federal Reserve but in fact the data came from Evolve Bank & Trust
Read moreFederal Reserve “breached” data may actually belong to Evolve Bank
LockBit claimed to have breached Federal Reserve but in fact the data came from Evolve Bank & Trust
Read more‘Operation Endgame’ Hits Malware Delivery Platforms
Credit to Author: BrianKrebs| Date: Thu, 30 May 2024 15:19:44 +0000
Law enforcement agencies in the United States and Europe today announced Operation Endgame, a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed “the largest ever operation against botnets,” the international effort is being billed as the opening salvo in an ongoing campaign targeting advanced malware “droppers” or “loaders” like IcedID, Smokeloader and Trickbot.
Read moreStark Industries Solutions: An Iron Hammer in the Cloud
Credit to Author: BrianKrebs| Date: Thu, 23 May 2024 23:32:43 +0000
Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. An investigation into Stark Industries reveals it is being used as a global proxy network that conceals the true source of cyberattacks and disinformation campaigns against enemies of Russia.
Read moreHow Did Authorities Identify the Alleged Lockbit Boss?
Credit to Author: BrianKrebs| Date: Mon, 13 May 2024 11:26:27 +0000
Last week, the United States joined the U.K. and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. LockBit’s leader “LockBitSupp” claims the feds named the wrong guy, saying the charges don’t explain how they connected him to Khoroshev. This post examines the activities of Khoroshev’s many alter egos on the cybercrime forums, and tracks the career of a gifted malware author who has written and sold malicious code for the past 14 years.
Read more