Mark Arena Archives - s0x • Austin Managed IT Services

5 Aug, 2021

Ransomware Gangs and the Name Game Distraction

Cybersecurity Babuk ransomware, BitPaymer, BlackMatter ransomware, Cerber, CrowdStrike, Cryptolocker, DarkSide ransomware, DoppelPaymer, Dridex, Emsisoft, Evgeniy Mikhailovich Bogachev, Evil Corp., Fabian Wosar, Gameover ZeuS, GandCrab, Grief ransomware, Indrik Spider, Mark Arena, Ransomware, REvil ransomware, TA505, The Business Club, WastedLocker, zeus

It’s nice when ransomware gangs have their bitcoin stolen, malware servers shut down, or are otherwise forced to disband. We hang on to these occasional victories because history tells us that most ransomware moneymaking collectives don’t go away so much as reinvent themselves under a new name, with new rules, targets and weaponry. Indeed, some of the most destructive and costly ransomware groups are now in their third incarnation over as many years. Reinvention is a basic survival skill in the cybercrime business. Among the oldest tricks in the book is to fake one’s demise or retirement and invent a new identity. A key goal of such subterfuge is to throw investigators off the scent or to temporarily direct their attention elsewhere. Cybercriminal syndicates also perform similar disappearing acts whenever it suits them. These organizational reboots are an opportunity for ransomware program leaders to set new ground rules for their members — such as which types of victims aren’t allowed (e.g., hospitals, governments, critical infrastructure), or how much of a ransom payment an affiliate should expect for bringing the group access to a new victim network. …

28 Oct, 2020

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

Cybersecurity Dagens Nyheter, Data Breaches, Gunnebo Group breach, Hold Security, Intel 471, Linus Larsson, Mark Arena, Ransomware, Rasmus Jansson, RDP, rEvil, Sodinokibi, Stefan Syrén

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

28 Oct, 2020

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

Cybersecurity Dagens Nyheter, Data Breaches, Gunnebo Group breach, Hold Security, Intel 471, Linus Larsson, Mark Arena, Ransomware, Rasmus Jansson, RDP, rEvil, Sodinokibi, Stefan Syrén

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

8 Oct, 2020

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work

Cybersecurity A Little Sunshine, domaintools, Dr. Samuil, Intel 471, Mark Arena, Ne'er-Do-Well News, Sergey Rakityansky, Web Fraud 2.0

There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in. But judging from the proliferation of help-wanted ads for offensive pentesters in the cybercrime underground, today’s attackers have exactly zero trouble gaining that initial intrusion: The real challenge seems to be hiring enough people to help everyone profit from the access already gained. …

2 Oct, 2020

Attacks Aimed at Disrupting the Trickbot Botnet

Cybersecurity alex holden, Hold Security, Intel 471, Mark Arena, Ransomware, Ryuk, The Coming Storm, trickbot, UHS, Universal Health Services

s0x • Austin Managed IT Services

s0x • Austin Managed IT Services

Tag Archives: Mark Arena

Ransomware Gangs and the Name Game Distraction

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work

Attacks Aimed at Disrupting the Trickbot Botnet