Ransomware - Security Ticks

Attackers are encrypting AWS S3 data without using ransomware

AWS, cloud storage, Don't miss, enterprise, extortion, Halcyon, Hot stuff, News, Ransomware / SecurityTicks

Attackers are encrypting AWS S3 data without using ransomware 2025-01-13 at 19:03 By Zeljka Zorz A ransomware gang dubbed Codefinger is encrypting data stored in target organizations’ AWS S3 buckets with AWS’s server-side encryption option with customer-provided keys (SSE-C), and asking for money to hand over the key they used. They do not exfiltrate the […]

React to this headline:

Attackers are encrypting AWS S3 data without using ransomware Read More »

Alleged Blender, Sinbad cryptomixer operators arrested, indicted

arrest, Cryptocurrency, cybercrime, News, Ransomware, US DoJ / SecurityTicks

Alleged Blender, Sinbad cryptomixer operators arrested, indicted 2025-01-13 at 13:34 By Help Net Security Three Russian nationals have been indicted in the Northern District of Georgia for their alleged role as operators of cryptocurrency mixing (cryptomixer) services Blender.io and Sinbad.io. Roman Vitalyevich Ostapenko and Alexander Evgenievich Oleynik were arrested on Dec. 1, 2024, roughly a

React to this headline:

Alleged Blender, Sinbad cryptomixer operators arrested, indicted Read More »

Preventing the next ransomware attack with help from AI

Artificial Intelligence, BlackFog, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Ransomware, security awareness, strategy, tips / SecurityTicks

Preventing the next ransomware attack with help from AI 2025-01-10 at 07:01 By Mirko Zorz In this Help Net Security interview, Dr. Darren Williams, CEO at BlackFog, talks about how employee training plays a crucial role in preventing ransomware attacks. He points out that human error is often the biggest security risk and explains how

React to this headline:

Preventing the next ransomware attack with help from AI Read More »

HexaLocker V2: Skuld Stealer Paving the Way prior to Encryption

Ransomware, Stealer / SecurityTicks

HexaLocker V2: Skuld Stealer Paving the Way prior to Encryption 2025-01-09 at 15:18 By rohansinhacyblecom Key Takeaways Executive Summary On August 9th, the HexaLocker ransomware group announced a new Windows-based ransomware on their Telegram channel. The post highlighted that the ransomware was developed in the Go programming language and claimed that their team included members

React to this headline:

HexaLocker V2: Skuld Stealer Paving the Way prior to Encryption Read More »

Russia, Ukraine, China, and More: The Nations at the Center of the Cybercrime Epidemic

cyber news, cyberattack, cybercrime, Ransomware, Threat Actor, Threat Intelligence, United Stated / SecurityTicks

Russia, Ukraine, China, and More: The Nations at the Center of the Cybercrime Epidemic 2024-12-27 at 12:48 By Ashish Khaitan Overview Cyberattacks on a country’s critical infrastructure have become a growing malicious trend globally. The surge in cybercrime threats and its growing impact on national security, businesses, and individuals has led experts to closely examine

React to this headline:

Russia, Ukraine, China, and More: The Nations at the Center of the Cybercrime Epidemic Read More »

US charges suspected LockBit ransomware developer

cybercrime, cybercriminals, DOJ, Hot stuff, law enforcement, News, Ransomware, USA / SecurityTicks

US charges suspected LockBit ransomware developer 2024-12-23 at 16:37 By Zeljka Zorz The US Department of Justice has unsealed charges against Rostislav Panev, 51, a dual Russian and Israeli national, suspected of being a developer for the LockBit ransomware group. Panev was arrested in August 2024 and is currently in custody in Israel pending extradition.

React to this headline:

US charges suspected LockBit ransomware developer Read More »

Top 10 Ransomware Trends Observed in 2024: A Look Ahead to 2025

Ransomware / SecurityTicks

Top 10 Ransomware Trends Observed in 2024: A Look Ahead to 2025 2024-12-23 at 10:48 By daksh sharma Ransomware attacks have evolved into one of the most significant threats to global cybersecurity. These attacks have shifted from mere opportunistic schemes to advanced operations targeting businesses, critical infrastructure, and even governments. The year 2024 saw ransomware

React to this headline:

Top 10 Ransomware Trends Observed in 2024: A Look Ahead to 2025 Read More »

How companies can fight ransomware impersonations

cybercrime, Don't miss, Hot stuff, Ransomware, Skyhigh Security, Video / SecurityTicks

How companies can fight ransomware impersonations 2024-12-23 at 06:31 By Help Net Security As these threat actors become increasingly strategic and harder to detect, organizations must take all measures to protect their data, including cybersecurity training. In this Help Net Security video, Rodman Ramezanian, Global Cloud Threat Lead at Skyhigh Security, discusses how companies can

React to this headline:

How companies can fight ransomware impersonations Read More »

Another NetWalker affiliate sentenced to 20 years in prison

cybercriminals, Don't miss, Hot stuff, Justice Department, News, Ransomware / SecurityTicks

Another NetWalker affiliate sentenced to 20 years in prison 2024-12-20 at 13:07 By Zeljka Zorz A 30-year old Romanian man was sentenced to 20 years in prison for leveraging the Netwalker ransomware to extort money from victims, the US Department of Justice announced on Thursday. Daniel Christian Hulea, of Jucu de Mijloc, Cluj, Romania, was

React to this headline:

Another NetWalker affiliate sentenced to 20 years in prison Read More »

Ransomware in 2024: New players, bigger payouts, and smarter tactics

At-Bay, Cato Networks, Cohesity, Corvus Insurance, cybercrime, GuidePoint Security, Malwarebytes, News, NTT Security, Onapsis, Ransomware, Rapid7, report, Semperis, Sophos, SpyCloud, survey, Veeam Software, Zscaler / SecurityTicks

Ransomware in 2024: New players, bigger payouts, and smarter tactics 2024-12-19 at 06:03 By Help Net Security In 2024, ransomware remained the top cybersecurity threat to organizations worldwide. New groups filled the void left by law enforcement crackdowns, targeting businesses with record-breaking ransom demands and sophisticated tactics. In this article, you will find excerpts from

React to this headline:

Ransomware in 2024: New players, bigger payouts, and smarter tactics Read More »

Romania Urges Energy Sector of Proactive Scanning Amid LYNX Ransomware Threat

LYNX Ransomware, Ransomware, Romania / SecurityTicks

Romania Urges Energy Sector of Proactive Scanning Amid LYNX Ransomware Threat 2024-12-13 at 12:48 By daksh sharma Overview The Romanian National Cyber Security Directorate (DNSC) has issued a critical advisory urging all entities, especially those in the energy sector, to scan their IT and critical infrastructure for malicious binaries associated with the LYNX ransomware cybercrime

React to this headline:

Romania Urges Energy Sector of Proactive Scanning Amid LYNX Ransomware Threat Read More »

Cleo patches zero-day exploited by ransomware gang

Cleo, enterprise, file-sharing, Huntress, News, Ransomware, Rapid7, Sophos / SecurityTicks

Cleo patches zero-day exploited by ransomware gang 2024-12-12 at 18:34 By Zeljka Zorz Cleo has released a security patch to address the critical vulnerability that started getting exploited while still a zero-day to breach internet-facing Cleo Harmony, VLTrader, and LexiCom instances. Version 5.8.0.24 of the three products, which was pushed out on Wednesday, plugs the

React to this headline:

Cleo patches zero-day exploited by ransomware gang Read More »

8Base hacked port operating company Luka Rijeka

data theft, Don't miss, EU, Europe, extortion, Hot stuff, maritime industry, News, Ransomware / SecurityTicks

8Base hacked port operating company Luka Rijeka 2024-12-09 at 14:48 By Zeljka Zorz Luka Rijeka, a company that offers maritime transport, port, storage of goods and forwarding services in Rijeka, Croatia, has been hacked by the 8Base ransomware group. The group claimed the attack on their dark web data leak site and professed that they’ve

React to this headline:

8Base hacked port operating company Luka Rijeka Read More »

A Technical Look at the New ‘Termite’ Ransomware that Hit Blue Yonder

Babuk Ransomware, cyber news, Ransomware, Termite ransomware / SecurityTicks

A Technical Look at the New ‘Termite’ Ransomware that Hit Blue Yonder 2024-12-06 at 20:48 By Paul Shread The ransomware attack that hit supply chain management platform Blue Yonder and its customers last month was the work of a new ransomware group called “Termite.” Cyble Research and Intelligence Labs (CRIL) researchers have examined a Termite

React to this headline:

A Technical Look at the New ‘Termite’ Ransomware that Hit Blue Yonder Read More »

US government, energy sector contractor hit by ransomware

energy sector, Government, Hot stuff, News, Ransomware, USA / SecurityTicks

US government, energy sector contractor hit by ransomware 2024-12-03 at 12:15 By Zeljka Zorz ENGlobal, a Texas-based engineering and automation contractor for companies in the energy sector, has had its data encrypted by attackers. “On November 25, 2024, ENGlobal Corporation (the “Company”) became aware of a cybersecurity incident. The preliminary investigation has revealed that a

React to this headline:

US government, energy sector contractor hit by ransomware Read More »

AI-based tools designed for criminal activity are in high demand

cybercrime, News, Ransomware, report, survey, Trellix / SecurityTicks

AI-based tools designed for criminal activity are in high demand 2024-11-29 at 06:03 By Help Net Security Multiple regional conflicts, such as Russia’s continued invasion of Ukraine and the Israel-Hamas conflict, have resulted in a surge in cyberattacks and hacktivist activities, according to Trellix. AI-driven ransomware boosts cybercrime tactics The research examines an increasingly complex

React to this headline:

AI-based tools designed for criminal activity are in high demand Read More »

German CERT Warns Zyxel Firewalls Exploited for Helldown Ransomware Deployment

CERT, Ransomware / SecurityTicks

German CERT Warns Zyxel Firewalls Exploited for Helldown Ransomware Deployment 2024-11-28 at 16:08 By daksh sharma Overview Zyxel firewalls have come under scrutiny following a wave of attacks leveraging vulnerabilities to deploy Helldown ransomware. A critical directory traversal vulnerability, tracked as CVE-2024-11667, in the Zyxel ZLD firmware (versions 5.00–5.38) has been linked to these breaches.

React to this headline:

German CERT Warns Zyxel Firewalls Exploited for Helldown Ransomware Deployment Read More »

VPN vulnerabilities, weak credentials fuel ransomware attacks

Corvus Insurance, cybercrime, cybersecurity, News, Ransomware, report, survey / SecurityTicks

VPN vulnerabilities, weak credentials fuel ransomware attacks 2024-11-28 at 08:12 By Help Net Security Attackers leveraging virtual private network (VPN) vulnerabilities and weak passwords for initial access contributed to nearly 30% of ransomware attacks, according to Corvus Insurance. According to the Q3 report, many of these incidents were traced to outdated software or VPN accounts

React to this headline:

VPN vulnerabilities, weak credentials fuel ransomware attacks Read More »

Ransomware payments are now a critical business decision

At-Bay, Cohesity, cybersecurity, News, Onapsis, Ransomware, Rubrik, Semperis, Sophos, SpyCloud, Veeam Software, Zscaler / SecurityTicks

Ransomware payments are now a critical business decision 2024-11-28 at 06:03 By Help Net Security Despite the efforts of law enforcement agencies to stop and bring to justice those responsible for ransomware attacks, the situation is not improving. While authorities do not recommend making a ransomware payment, some companies are forced to make that choice

React to this headline:

Ransomware payments are now a critical business decision Read More »

Starbucks, grocery stores impacted by Blue Yonder ransomware attack

attack, cybercrime, News, Ransomware / SecurityTicks

Starbucks, grocery stores impacted by Blue Yonder ransomware attack 2024-11-26 at 16:15 By Mirko Zorz Supply chain management SaaS vendor Blue Yonder announced on November 21 that it experienced a ransomware attack that impacted its managed services hosted environment. “Since learning of the incident, the Blue Yonder team has been working diligently together with external

React to this headline:

Starbucks, grocery stores impacted by Blue Yonder ransomware attack Read More »