APT groups use ransomware TTPs as cover for intelligence gathering and sabotage
Changing tactics by North Korean, Russian, and Chinese APT groups suggest that Western companies are at greater risk.
Changing tactics by North Korean, Russian, and Chinese APT groups suggest that Western companies are at greater risk.
The decline of big ransomware groups like Conti and REvil has given rise to smaller gangs, presenting a threat intelligence challenge.
The ransomware gang was able to use signed malicious drivers to disable endpoint security tools. Microsoft has revoked the certificates.
Rackspace Technology has acknowledged that a recent incident took most of its Hosted Exchange email server business offline was the product of a ransomware attack.
Ransom Cartel, a RaaS operation, has stepped up its attacks over the past year after the disbanding of prominent gangs such as REvil and Conti.
Detection, data management and vaulting are all present in Cohesity’s new Datahawk SaaS application.
Representatives from 36 countries and the EU agree that combatting ransomware requires international collaboration but legal systems need to catch up.
The number of ransomware attacks observed over the previous three months declined compared to the previous quarter, according to new reports.
Corrupting files is faster, cheaper, and less likely to be stopped by endpoint protection tools than encrypting them.
While ransomware attacks remain highly dangerous, data from a prominent insurer suggests that their frequency and severity is beginning to decline.
Retailers are fast becoming the favourite targets for ransomware criminals, with two out of three companies in the sector being attacked last year.
A Trend Micro report reveals that 52% of global organisations have a supply chain partner that was hit by ransomware.
Ransomware gangs seem to be exploiting concerns over disruptions in the energy and other critical infrastructure sectors.
While ransomware and business email compromise are leading causes of cyber security threats, geopolitics and deepfakes play an increasing role.
New solution tests companies' ability to thwart cyber attacks by selecting and repurposing the most critical ransomware variants to run in production environments.