Security News > 2022 > August > BazarCall attack increasingly used by ransomware threat actors
2022-08-16 17:11
AdvIntel has released a new publication about several threat actors now using BazarCall in an effort to raise awareness of this threat.
Once done, the threat actor has a functional backdoor to the victim's computer, which can later be used for further exploitation.
Figure A. Several ransomware threat actors at stake.
The call back phishing attack is heavily tied to Conti, the infamous ransomware threat actor who broke into several different groups in 2021.
The third threat group using the BazarCall technique is Roy/Zeon.
Why is BazarCall a revolution for ransomware threat groups?
News URL
https://www.techrepublic.com/article/bazarcall-attack-increasingly-used-by-ransomware-threat-actors/
Related news
- JPCERT shares Windows Event Log tips to detect ransomware attacks (source)
- Ransomware attack forces UMC Health System to divert some patients (source)
- Underground ransomware claims attack on Casio, leaks stolen data (source)
- Casio confirms customer data stolen in a ransomware attack (source)
- Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between (source)
- Volkswagen monitoring data dump threat from 8Base ransomware crew (source)
- BianLian ransomware claims attack on Boston Children's Health Physicians (source)
- Microsoft: Ransomware Attacks Growing More Dangerous, Complex (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks (source)