• Search for:
    2 Mar, 2022
    Conti Ransomware Group Diaries, Part II: The Office
    Cybersecurity , , , , , , , , , , , , , , ,

    Earlier this week, a Ukrainian security researcher leaked almost two years’ worth of internal chat logs from Conti, one of the more rapacious and ruthless ransomware gangs in operation today. Tuesday’s story examined how Conti dealt with its own internal breaches and attacks from private security firms and governments. In Part II of this series we’ll explore what it’s like to work for Conti, as described by the Conti employees themselves. …

    Read MoreConti Ransomware Group Diaries, Part II: The Office

    14 Dec, 2021
    Inside Ireland’s Public Healthcare Ransomware Scare
    Cybersecurity , , , , , , , , ,

    The accounting firm PricewatersCoopers recently published lessons learned from the disruptive and costly ransomware attack in May 2021 on Ireland’s public health system. The unusually candid post-mortem found that nearly two months elapsed between the initial intrusion and the launching of the ransomware. It also found affected hospitals had tens of thousand of outdated Windows 7 systems, and that the health system’s IT administrators failed to respond to multiple warning signs that a massive attack was imminent. …

    Read MoreInside Ireland’s Public Healthcare Ransomware Scare

    25 Oct, 2021
    Conti Ransom Gang Starts Selling Access to Victims
    Cybersecurity , , , , , , , , ,

    The Conti ransomware affiliate program appears to have altered its business plan recently. Organizations infected with Conti’s malware who refuse to negotiate a ransom payment are added to Conti’s victim shaming blog, where confidential files stolen from victims may be published or sold. But sometime over the past 48 hours, the cybercriminal syndicate updated its victim shaming blog to indicate that it is now selling access to many of the organizations it has hacked. …

    Read MoreConti Ransom Gang Starts Selling Access to Victims

    27 Jan, 2021
    International Action Targets Emotet Crimeware
    Cybersecurity , , , , , ,

    Authorities across Europe on Tuesday said they’d seized control over Emotet, a prolific malware strain and cybercrime-as-service operation. Investigators say the action could help quarantine more than a million Microsoft Windows systems currently compromised with malware tied to Emotet infections. …

    Read MoreInternational Action Targets Emotet Crimeware

    10 Dec, 2020
    Payment Processing Giant TSYS: Ransomware Incident “Immaterial” to Company
    Cybersecurity , , , , , , ,

    Payment card processing giant TSYS suffered a ransomware attack earlier this month. Since then reams of data stolen from the company have been posted online, with the attackers promising to publish more in the coming days. But the company says the malware did not jeopardize card data, and that the incident was limited to administrative areas of its business. …

    Read MorePayment Processing Giant TSYS: Ransomware Incident “Immaterial” to Company

    29 Oct, 2020
    FBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals
    Cybersecurity , , , , , , , , , , ,

    On Monday, Oct. 27, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today, officials from the FBI and the U.S. Department of Homeland Security hastily assembled a conference call with healthcare industry executives warning about an “imminent cybercrime threat to U.S. hospitals and healthcare providers.” …

    Read MoreFBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals

    2 Oct, 2020
    Attacks Aimed at Disrupting the Trickbot Botnet
    Cybersecurity , , , , , , , , ,

    Over the past 10 days, someone has been launching a series of coordinated attacks designed to disrupt Trickbot, an enormous collection of more than two million malware-infected Windows PCs that are constantly being harvested for financial data and are often used as the entry point for deploying ransomware within compromised organizations. …

    Read MoreAttacks Aimed at Disrupting the Trickbot Botnet

    6 Jan, 2020
    The Hidden Cost of Ransomware: Wholesale Password Theft
    Cybersecurity , , , , , , , , ,

    Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. But all too often, ransomware victims fail to grasp that the crooks behind these attacks can and frequently do siphon every single password stored on each infected endpoint. The result of this oversight may offer attackers a way back into the affected organization, access to financial and healthcare accounts, or — worse yet — key tools for attacking the victim’s various business partners and clients. …

    Read MoreThe Hidden Cost of Ransomware: Wholesale Password Theft

    19 Nov, 2019
    Ransomware Bites 400 Veterinary Hospitals
    Cybersecurity , , , , , , ,

    National Veterinary Associates (NVA), a California company that owns more than 700 animal care facilities around the globe, is still working to recover from a ransomware attack late last month that affected more than half of those properties, separating many veterinary practices from their patient records, payment systems and practice management software. NVA says it expects to have all facilities fully back up and running normally within the next week. …

    Read MoreRansomware Bites 400 Veterinary Hospitals