Security News

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief
2024-06-09 12:10

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims
2024-06-07 07:48

The U.S. Federal Bureau of Investigation (FBI) has disclosed that it's in possession of more than 7,000 decryption keys associated with the LockBit ransomware operation to help victims get their...

New Fog ransomware targets US education sector via breached VPNs
2024-06-06 18:29

A new ransomware operation named 'Fog' launched in early May 2024, using compromised VPN credentials to breach the networks of educational organizations in the U.S. Fog was discovered by Arctic Wolf Labs, which reported that the ransomware operation has not set up an extortion portal yet and was not observed stealing data. BleepingComputer can confirm the ransomware gang steals data for double-extortion attacks, using the data as leverage to scare victims into paying.

Linux version of TargetCompany ransomware focuses on VMware ESXi
2024-06-05 23:17

Researchers observed a new Linux variant of the TargetCompany ransomware family that targets VMware ESXi environments using a custom shell script to deliver and execute payloads. In a report today, cybersecurity company Trend Micro says that the new Linux variant for TargetCompany ransomware makes sure that it has administrative privileges before continuing the malicious routine.

FBI recovers 7,000 LockBit keys, urges ransomware victims to reach out
2024-06-05 22:48

The FBI urges past victims of LockBit ransomware attacks to come forward after revealing that it has obtained over 7,000 LockBit decryption keys that they can use to recover encrypted data for free. "From our ongoing disruption of LockBit, we now have over 7,000 decryption keys and can help victims reclaim their data and get back online," the FBI Cyber Lead said in a keynote.

What is RansomHub? Looks like a Knight ransomware reboot
2024-06-05 20:13

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Qilin ransomware gang linked to attack on London hospitals
2024-06-05 17:57

A ransomware attack that hit pathology services provider Synnovis on Monday and impacted several major NHS hospitals in London has now been linked to the Qilin ransomware operation. Memos sent by officials of hospitals affected by the Synnovis ransomware attack revealed on Tuesday that this "Ongoing critical incident" has had a "Major impact" on their procedures and operations.

RansomHub extortion gang linked to now-defunct Knight ransomware
2024-06-05 12:39

Security researchers analyzing the relatively new RansomHub ransomware-as-a-service believe that it has evoloved from the currently defunct Knight ransomware project. RansomHub has a short history and operated mainly as a data theft and extortion group that sells stolen files to the highest bidder.

Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide
2024-06-05 10:10

An analysis of a nascent ransomware strain called RansomHub has revealed it to be an updated and rebranded version of Knight ransomware, itself an evolution of another ransomware known as Cyclops....

Major London hospitals disrupted by Synnovis ransomware attack
2024-06-04 16:05

A ransomware attack affecting pathology and diagnostic services provider Synnovis has impacted healthcare services at multiple major NHS hospitals in London.While Synnovis has yet to issue a public statement regarding the June 3 ransomware attack, memos sent by partner hospitals affected by the attack revealed that this "Ongoing critical incident" has had a "Major impact" on healthcare services across southeast London.