Security News

The Week in Ransomware - April 19th 2024 -  Attacks Ramp Up
2024-04-19 23:36

Dutch chipmaker Nexperia confirmed late last week that hackers breached its network in March 2024 after a ransomware gang leaked samples of allegedly stolen data. Ransomware gang starts leaking alleged stolen Change Healthcare data.

HelloKitty ransomware rebrands, releases CD Projekt and Cisco data
2024-04-19 19:20

An operator of the HelloKitty ransomware operation announced they changed the name to 'HelloGookie,' releasing passwords for previously leaked CD Projekt source code, Cisco network information, and decryption keys from old attacks. To celebrate the launch, the threat actor released four private decryption keys that can be used to decrypt files in older attacks, as well as internal information stolen from Cisco in a 2022 attack and passwords for the leaked source code for Gwent, Witcher 3, and Red Engine stolen from CD Projekt in 2021.

United Nations agency investigates ransomware attack, data theft
2024-04-19 18:03

The United Nations Development Programme is investigating a cyberattack after threat actors breached its IT systems to steal human resources data. While the UN agency has yet to link the attack to a specific threat group, the 8Base ransomware gang added a new UNDP entry to its dark web data leak website on March 27.

Ransomware in Q1 2024: Frequency, size of payments trending downwards, SMBs beware!
2024-04-19 12:43

More organizations hit by ransomware gangs are starting to realize that it doesn't pay to pay up: "In Q1 2024, the proportion of victims that chose to pay touched a new record low of 28%," ransomware incident response firm Coveware has found. "LockBit was found to still be holding the stolen data of victims that had paid a ransom, and we have also seen prior Hive victims that had paid the extortion, have their data posted on the Hunters International leak site," the company said, noting that "Future victims of data exfiltration extortion are getting more evidence daily that payments to suppress leaks have little efficacy in the short and long term."

Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers
2024-04-19 11:01

Threat actors behind the Akira ransomware group have extorted approximately $42 million in illicit proceeds after breaching the networks of more than 250 victims as of January 1, 2024. "Since...

Ransomware feared as IT 'issues' force Octapharma Plasma to close 150+ centers
2024-04-18 22:27

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

FBI: Akira ransomware raked in $42 million from 250+ victims
2024-04-18 18:11

According to a joint advisory from the FBI, CISA, Europol's European Cybercrime Centre, and the Netherlands' National Cyber Security Centre, the Akira ransomware operation has breached the networks of over 250 organizations and raked in roughly $42 million in ransom payments. "As of January 1, 2024, the ransomware group has impacted over 250 organizations and claimed approximately $42 million in ransomware proceeds," the joint advisory warns.

185K people's sensitive data in the pits after ransomware raid on Cherry Health
2024-04-18 14:00

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Recover from Ransomware in 5 Minutes—We will Teach You How!
2024-04-18 11:17

Super Low RPO with Continuous Data Protection:Dial Back to Just Seconds Before an Attack Zerto, a Hewlett Packard Enterprise company, can help you detect and recover from ransomware in near...

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate
2024-04-18 05:00

Since June 2023, Sophos X-Ops has discovered 19 junk gun ransomware variants - cheap, independently produced, and crudely constructed - on the dark web. "Over the past two months some of the biggest players in the ransomware ecosystem have disappeared or shut down, and, in the past, we've also seen ransomware affiliates vent their anger over the profit-sharing scheme of RaaS. Nothing within the cybercrime world stays static forever, and these cheap versions of off-the-shelf ransomware may be the next evolution in the ransomware ecosystem-especially for lower-skilled cyber attackers simply looking to make a profit rather than a name for themselves," Budd concluded.