REvil ransomware disappears after Tor services hijacked
For the second time this year the REvil ransomware group has disappeared off the grid. Will they come back again? All bets are open.
With some pests you hope...
Protect yourself from BlackMatter ransomware: Advice issued
Due to an increased activity of the BlackMatter ransomware group against US-based entities, the FBI, CISA, and NSA offer advice to better protect against these attacks.
Despite promises made...
Ransom Disclosure Act would mandate ransomware payment reporting
The Ransom Disclosure Act would require many companies, local governments, and non-profits to disclose whenever they pay a ransomware demand.
In an effort to better understand and clamp...
Police take a piece out of a ransomware gang, but won’t say which one
One of the world's ransomware groups appears to be a couple of members short today, but nobody's saying which one.
One of the world’s ransomware groups appears to be...
3 security lessons from an MSP that survived the Kaseya VSA attack
An Indiana-based MSP offers lessons in what needs to change following the Kaseya VSA ransomware attack.
Jay Tipton, chief executive for the Managed Service Provider (MSP) Technology Specialists,...
Analysts “strongly believe” the Russian state colludes with ransomware gangs
"We have the smoke, the smell of gunpowder and a bullet casing. But we do not have the gun to link the activity to the Kremlin."
“We have the...
Ransomware turncoat leaks Conti data, lifts the lid on the ransomware business
An individual involved with the Conti ransomware gang decided to leak how-to documents and software for affiliates.
Last week, The Record broke the news that a self-described “pen tester”...
Kaseya VSA Zero Day Exploit Explained
This article explains the pre-auth remote code execution exploit against Kaseya VSA Server that was used in the mass Revil ransomware attack on July 2nd, 2021. On July 5th, after...
BlackMatter, a new ransomware group, claims link to DarkSide, REvil
BlackMatter is only one of a handful of new ransomware variants that started its operations not long ago.
There’s a new ransomware gang in town—and, frankly, we’re not at...
CNA legal filings lift the curtain on a Phoenix CryptoLocker ransomware attack
According to CNA, the attack started when an employee downloaded a fake browser from a legitimate website.
Two months after fully restoring its systems, CNA Financial, the leading US...
