Ransomware groups – who are they, what do they want and how do they do it?
Ransomware – a cybersecurity term that is now familiar to the general public as it has a detrimental impact on all areas of the economy.
Cyber Threat Intelligence
Analysing a latent malware infection on a recently MDE-onboarded machine (Part 2)
Recently, an interesting latent malware infection was found on a newly onboarded machine at one of our clients (Client). Microsoft Defender for Endpoint (MDE) reported anomalies about the computer shortly after onboarding, but uncovering the inner workings of the malware and the infection methods required thorough investigation We present the ...
Analysing a latent malware infection on a recently MDE-onboarded machine (Part 1)
Recently, an interesting latent malware infection was found on a newly onboarded machine at one of our clients (Client). Microsoft Defender for Endpoint (MDE) reported anomalies about the computer shortly after onboarding, but uncovering the inner workings of the malware and the infection methods required thorough investigation, which anonymized version ...
The Ferrari incident and why the automotive industry is a favourite of cyber criminals
Ferrari’s recent incident shows yet again why the automotive industry is a prime target for cybercriminals and ransomware groups – joining a long line of similar attacks including Ferrari’s hit last year, the “Conti” incident of Volkswagen and Audi or Renault as collateral in the WannaCry campaign, to just name ...
Are your Exchange Online accounts safe?
You might think your corporate email accounts are safe enough, maybe you have a decent password policy, and your email service does a pretty good job of filtering suspicious emails and malicious URLs. Still, there are ways attackers could gain access, and the playing field isn’t level, cybersecurity threats are ...
The REvil is in the details
The REvil (also known as Sodinokibi) ransomware operation has taken the spotlight in recent years. The Russian group operates by direct attacks, and also in a ransomware-as-a-service (RaaS) model, through affiliates who provide access to networks, carry out ransomware attacks or negotiate on behalf of REvil. In the RaaS model, ...
Anatova – A Cool Proof-Of-Concept Ransomware
The Anatova ransomware first came to light in 2019 January. It was discovered on a private P2P network, and McAfee detected over 300 instances of the malware worldwide at the time. Anatova’s objective is to encrypt important files and network shares and demanding a cryptocurrency ransom of 10 DASH for ...