Sodinokibi Archives - s0x • Austin Managed IT Services

7 Jun, 2021

Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

Cybersecurity A Little Sunshine, Colonial Pipeline, DarkSide ransomware, Elliptic, Ne'er-Do-Well News, Nicholas Weaver, Ransomware, rEvil, Sodinokibi, Tom Robinson, U.S. Department of Justice

17 May, 2021

Try This One Weird Trick Russian Hackers Hate

Cybersecurity Allison Nixon, Colonial Pipeline ransomware attack, Cybereason, DarkSide ransomware, fbi, Lance James, Microsoft Windows, Ransomware, rEvil, Security Tools, Sodinokibi, twitter, Unit221B

In a Twitter discussion last week on ransomware attacks, KrebsOnSecurity noted that virtually all ransomware strains have a built-in failsafe designed to cover the backsides of the malware purveyors: They simply will not install on a Microsoft Windows computer that already has one of many types of virtual keyboards installed — such as Russian or Ukrainian. So many readers had questions in response to the tweet that I thought it was worth a blog post exploring this one weird cyber defense trick. …

28 Oct, 2020

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

Cybersecurity Dagens Nyheter, Data Breaches, Gunnebo Group breach, Hold Security, Intel 471, Linus Larsson, Mark Arena, Ransomware, Rasmus Jansson, RDP, rEvil, Sodinokibi, Stefan Syrén

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

28 Oct, 2020

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

Cybersecurity Dagens Nyheter, Data Breaches, Gunnebo Group breach, Hold Security, Intel 471, Linus Larsson, Mark Arena, Ransomware, Rasmus Jansson, RDP, rEvil, Sodinokibi, Stefan Syrén

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

2 Jun, 2020

REvil Ransomware Gang Starts Auctioning Victim Data

Cybersecurity A Little Sunshine, Bleeping Computer, Chainalysis, Lawrence Abrams, Ransomware, REvil ransomware, Sodin, Sodinokibi

The criminal group behind the REvil ransomware enterprise has begun auctioning off sensitive data stolen from companies hit by its malicious software. The move marks an escalation in tactics aimed at coercing victims to pay up — and publicly shaming those don’t. But it may also signal that ransomware purveyors are searching for new ways to profit from their crimes as victim businesses struggle just to keep the lights on during the unprecedented economic slowdown caused by the COVID-19 pandemic. …

18 May, 2020

This Service Helps Malware Authors Fix Flaws in their Code

Cybersecurity A Little Sunshine, Cerber, GandCrab, Intel 471, Krober, Lebron, malware testing service, Ne'er-Do-Well News, RedBear, rEvil, Sodin, Sodinokibi, UNKN, upO, Vivalamuerte, Web Fraud 2.0

Almost daily now there is news about flaws in commercial software that lead to computers getting hacked and seeded with malware. But the reality is most malicious software also has its share of security holes that open the door for security researchers or ne’er-do-wells to liberate or else seize control over already-hacked systems. Here’s a look at one long-lived malware vulnerability testing service that is used and run by some of the Dark Web’s top cybercriminals. …

28 Dec, 2019

Ransomware at IT Services Provider Synoptek

Cybersecurity Ransomware, rEvil, Sodinokibi, Synoptek

Synoptek, a California business that provides cloud hosting and IT management services to more than a thousand customer nationwide, suffered a ransomware attack this week that has disrupted operations for many of its clients, according to sources. The company has reportedly paid a ransom demand in a bid to restore operations as quickly as possible. Irvine, Calif.-based Synoptek is a managed service provider that maintains a variety of cloud-based services for more than 1,100 customers across a broad spectrum of industries, including state and local governments, financial services, healthcare, manufacturing, media, retail and software. The company employs nearly a thousand employees and brought in more than $100 million in revenue in the past year. …

17 Dec, 2019

Ransomware Gangs Now Outing Victim Businesses That Don’t Pay Up

Cybersecurity BleepingComputer, Lawrence Abrams, Maze Ransomware, Ransomware, rEvil, Sodinokibi, The Coming Storm

7 Dec, 2019

Ransomware at Colorado IT Provider Affects 100+ Dental Offices

Cybersecurity Complete Technology Solutions ransomware, Herb Miner, Medix Dental, PerCSoft, Ransomware, rEvil, Sodinokibi, Thomas Terronez

A Colorado company that specializes in providing IT services to dental offices suffered a ransomware attack this week that is disrupting operations for more than 100 dentistry practices, KrebsOnSecurity has learned. Multiple sources affected say their IT provider, Englewood, Colo. based Complete Technology Solutions (CTS), was hacked, allowing a potent strain of ransomware known as “Sodinokibi” or “rEvil” to be installed on computers at more than 100 dentistry businesses that rely on the company for a range of services — including network security, data backup and voice-over-IP phone service. …

Tag Archives: Sodinokibi