Security Awareness Training Blog

Ransomware Blog

Keeping you updated on the latest ransomware attack vectors, strains, decryptors, families and trends to help you avoid becoming infected.

Evil Corp Tries to Work Around U.S. Treasury Sanctions Using Hades Ransomware

The cybercriminal group linked to over $100 Million in financial damages has pivoted their execution strategy to bypass sanctions that prevent U.S. companies from paying them ransom.
Continue Reading

New Ransomware Task Force Shares Actions To Disrupt Ransomware Cyber Crime

The Ransomware Task Force, a public-party coalition of more than 50 experts, has shared a framework of actions to disrupt the ransomware business model.
Continue Reading

The Darkside Ransomware Group Is the Dangerous Poster Child for Today’s Ransomware-as-a-Service

Looking beyond the “older” RaaS threat groups like Ryuk, DoppelPaymer, and Revil, today’s modern ransomware-as-a-service operator is far more business-like and specific in execution.
Continue Reading

Eavesdrop on the Back-and-Forth of Negotiating with a Criminal Ransomware Organization

Details around the recent successful ransomware attack on fashion retailer FatFace provide some insight into what you should expect when you become a victim.
Continue Reading

The Clop #Ransomware gang is now pressuring  customers of victims threatening that their personal, confidential data will be exposed unless a ransom is paid

Brian Krebs just reported: "Some of the top ransomware gangs are deploying a new pressure tactic to push more victim organizations into paying an extortion demand: Emailing the victim’s ...
Continue Reading

Encryption, Exfiltration, and Extortion are the Name of the Game as PSYA Ransomware Attacks on Education Organizations Increase

A new warning from the FBI highlights an aggressive campaign of ransomware attacks targeting higher education, K-12 schools, and seminaries, providing specific attack details.
Continue Reading

FBI's Newly Release Internet Crime Report Shows Cybercrime has Ramped Up in 2020

The FBI's Internet Crime Complaint Center (IC3) released their annual report, and the number of complaints have skyrocketed in 2020.
Continue Reading

UK Report Warns of Ransomware Being the 'Perfect Storm'

According to the recent report by the Royal United Services Institute (RUSI) , they are sending a warning to organisations in the UK that ransomware is becoming more and more costly to ...
Continue Reading

Aussie TV Network Taken Off Air by Ransomware

The "early-scoop" Phil Muncaster at InfoSec Mag reported: "An Australian TV network was taken off-air for over 24 hours by suspected state-backed attackers, in what it described as the ...
Continue Reading

Average Ransoms Triple while Ransomware Incident Response Costs Pile On

New data shows it’s now clear the biggest problem with ransomware (just after taking down your operation) is all the necessary costs incurred trying to clean up the mess post-attack.
Continue Reading

REvil Ransomware Now Helps with Extortion by Offering to Call the Victim’s Contractors and the Media

The bad guys are going to great lengths to ensure they make their money. As part of its Ransomware-as-a-Service, REvil is now expanding its services to aid in the extortion phase.
Continue Reading

New UK National Cyber Security Centre Head Warns that Cybersecurity Should be Taken More Seriously

Even though the UK has made 'huge progress' on cybersecurity efforts, the new Chief Executive of the National Cyber Security Centre (NCSC) Lindy Cameron believes that the current efforts ...
Continue Reading

A Tale of Two Ransomware Variants: Two Ends of the Ransomware Attack Spectrum

Ransomware attacks are evolving much in the same way any saturated services market would, with specific targets, extortion techniques used, and customer experiences. Two new variants ...
Continue Reading

FBI Warns that PYSA Ransomware is Targeting Schools

The FBI has warned of a wave of ransomware attacks against schools and other entities across the United States and the UK.
Continue Reading

Ransomware Attacks Are Growing More Costly and Effective by the Day

The availability of commodity bots and ransomware is making the business of ransomware accessible to just about every. And, according to new data, everyone’s getting in on the game.
Continue Reading

Exchange Exploit Attempts Surge Sixfold as Ransomware Lands

The Phil Muncaster at Info Security Mag had it first: "The number of global exploit attempts targeting vulnerable Microsoft Exchange servers has risen sixfold over the past few days, as ...
Continue Reading

[Heads Up] Has Your Exchange Been Hacked And Is Now A Ticking Time Bomb?

Brian Krebs wrote: "Globally, hundreds of thousand of organizations running Exchange email servers from Microsoft just got mass-hacked, including at least 30,000 victims in the United ...
Continue Reading

The Different Scenarios How Backups are Vulnerable to Ransomware Attacks

Organizations need to ensure that their data backups aren’t tampered with by attackers, according to security firm Datto. In an article for Channel Futures, Datto explained that backups ...
Continue Reading

Universal Health Services Becomes Next Victim of Ryuk Ransomware, Costing $67 Million

Fortune 500 hospital and health care service provider Universal Health Services (UHS) recently became victim to Ryuk ransomware in September 2020.
Continue Reading

[Heads Up] New Ryuk Ransomware Strain Now Worms Itself To All Your Windows LAN Devices

A new Ryuk strain has a worm-like feature that allows it to spread to all other devices on victims' local networks. It was discovered by the French CERT, their national cyber-security ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews