Security News

Avast releases free decryptor for DoNex ransomware and past variants
2024-07-08 18:51

Antivirus company Avast have discovered a weakness in the cryptographic scheme of the DoNex ransomware family and released a decryptor so victims can recover their files for free. [...]

New Ransomware-as-a-Service 'Eldorado' Targets Windows and Linux Systems
2024-07-08 13:15

An emerging ransomware-as-a-service operation called Eldorado comes with locker variants to encrypt files on Windows and Linux systems. Eldorado first appeared on March 16, 2024, when an advertisement for the affiliate program was posted on the ransomware forum RAMP, Singapore-headquartered Group-IB said.

Avast secretly gave DoNex ransomware decryptors to victims before crims vanished
2024-07-08 12:44

Researchers at Avast have provided decryptors to DoNex ransomware victims on the down-low since March after discovering a flaw in the crims' cryptography, the company confirmed today. Avast offered a brief explanation about how DoNex encrypts victims' data, but annoyingly didn't actually offer any insight into the flaw in its schema.

Decryptor for DoNex, Muse, DarkRace, (fake) LockBit 3.0 ransomware released
2024-07-08 09:57

A cryptographic weakness in the DoNex ransomware and its previous incarnations - Muse, fake LockBit 3.0, and DarkRace - has allowed Avast researchers to create a decryptor for files encrypted by all those ransomware variants. "In cooperation with law enforcement organizations, we have been silently providing the decryptor to DoNex ransomware victims since March 2024," the company's Threat Research Team has shared on Monday.

New Eldorado ransomware targets Windows, VMware ESXi VMs
2024-07-05 15:56

A new ransomware-as-a-service called Eldorado emerged in March and comes with locker variants for VMware ESXi and Windows. Eldorado is a Go-based ransomware that can encrypt both Windows and Linux platforms through two distinct variants with extensive operational similarities.

Ransomware scum who hit Indonesian government apologizes, hands over encryption key
2024-07-04 05:47

Brain Cipher, the group responsible for hacking into Indonesia's Temporary National Data Center and disrupting the country's services, has seemingly apologized for its actions and released an encryption key to the government. The cyber criminals had demanded a ransom of 131 billion Rupiah to release data it ransomwared June 20, but the Indonesian government refused to pay up.

Patelco shuts down banking systems following ransomware attack
2024-07-02 17:47

Patelco Credit Union has disclosed it experienced a ransomware attack that led to the proactive shutdown of several of its customer-facing banking systems to contain the incident's impact.Patelco is an American credit union with assets exceeding $9 billion.

Affirm fears customer info pilfered during ransomware raid at Evolve Bank
2024-07-02 13:16

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

How MFA Failures are Fueling a 500% Surge in Ransomware Losses
2024-07-02 11:00

The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in...

Meet Brain Cipher — The new ransomware behind Indonesia's data center attack
2024-06-29 14:14

The new Brain Cipher ransomware operation has begun targeting organizations worldwide, gaining media attention for a recent attack on Indonesia's temporary National Data Center. Indonesia is building out National Data Centers to securely store servers used by the government for online services and data hosting.