In what might sound like an unremarkable incident, in early August a single PC in a factory in Wolverhampton, U.K., was compromised by malware connected to the notorious LockBit ransomware group. The PC in question belonged to Zaun, a British manufacturer of high-security perimeter fencing. Unfortunately, the compromise allowed the attackers to download 10GB of […]
Of all the root causes of ransomware, malicious advertising (malvertising) is probably not a threat vector most CISOs lose much sleep over. Malvertising, it is assumed, is old school: Criminals buy keyword advertising on a search engine, luring anyone who clicks on a rogue link to sites offering a range of bad possibilities. It sounds […]
Earlier this year, Britain’s National Cyber Security Centre (NCSC) published some promising figures for its Early Warning service set up to give U.K. organizations a rapid heads-up about developing cyberattacks, including ransomware. Formally launched in 2021 as part of the NCSC’s wider Active Cyber Defence (ACD) program, Early Warning is available at no cost to […]
Readers will doubtless have heard the phrase “Ransomware as a Service” (aka RaaS). The ransomware part of that term gets a lot of coverage but what about the service? Ransomware services, one might assume, must be served from somewhere, but where does this happen? The Dark Web It’s a question surprisingly few people ask. As […]
A trend that often gets lost in the reporting of cybersecurity incidents is how important mainstream pen testing tools have become to cybercrime. This is also true in the ransomware sector where popular tools such as Cobalt Strike, Mimikatz, and PsExec are routinely abused for a multitude of tasks including reconnaissance, credential abuse, and post […]
Ever since ransomware actors took to stealing and leaking data rather than merely encrypting it, they’ve have had to overcome the problem of how to exploit their success in a way that scales efficiently. If you leak data from a few victims, the answer is fairly simple: Post sample data on a dark web site […]
