SolarWinds Hack Potentially Linked to Turla APT
Researchers have spotted notable code overlap between the Sunburst backdoor and a known Turla weapon.
New details on the Sunburst backdoor used in the sprawling SolarWinds supply-chain attack potentially link...
Ryuk Rakes in $150M in Ransom Payments
An examination of the malware gang’s payments reveals insights into its economic operations.
The Ryuk ransomware has earned its operators an estimated $150 million, according to an examination of the...
Malspam campaign spoofs email chains to install IcedID info-stealer
By:
Bradley Barth
A phishing campaign has been attempting to disguise spam as an email chain, using genuine...
Linux machines again targeted by hackers with new memory loader
By:
Bradley Barth
Linux-based machines are no longer considered a major deterrent for cybercriminal groups, who are embracing...
New Year, New Ransomware: Babuk Locker Targets Large Corporations
Despite being a mostly run-of-the-mill ransomware strain, Babuk Locker’s encryption mechanisms and abuse of Windows Restart Manager sets it apart.
Only a few days into the new year, one of...
Threatpost Poll: Weigh in on Ransomware Security
Provide your views on ransomware and how to deal with it in our anonymous Threatpost poll.
It’s no secret that ransomware attacks continue to rise – with the number of attacks ...
Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRat
A North Korean threat group has swapped the usual Hangul Office lures for a cleverly packed Office macro.
This post was authored by Hossein Jazi
On December 7 2020 we...
Feds Pinpoint Russia as ‘Likely’ Culprit Behind SolarWinds Attack
The widespread compromise affecting key government agencies is ongoing, according to the U.S. government.
The U.S. government has identified Russia as the “likely” culprit behind the widespread SolarWinds cyberattack that...
It’s Not the Trump Sex Tape, It’s a RAT
Criminals are using the end of the Trump presidency to deliver a new remote-access trojan (RAT) variant disguised as a sex video of the outgoing POTUS, researchers report.
As outgoing...
Major Gaming Companies Hit with Ransomware Linked to APT27
Researchers say a recent attack targeting videogaming developers has ‘strong links’ to the infamous APT27 threat group.
A recent slew of related ransomware attacks on top videogame companies has been...
