Security Awareness Training Blog

Ransomware Blog

Keeping you updated on the latest ransomware attack vectors, strains, decryptors, families and trends to help you avoid becoming infected.

Locky Ransomware Returns with Phishing Campaign Pushing The Diablo6 Variant

Our friend Larry Abrams at Bleepingcomputer wrote August 9th: "Through a large malspam campaign, Locky is back and currently being heavily distributed worldwide. While Locky was at one ...
Continue Reading

HealthCare Industry Needs Prescription For Next Wave of Ransomware Threats

According to a recent article in HealthCare IT News, "Ransomware 2.0: It's Coming, and Healthcare Needs to get Prepared", the next wave of ransomware may be much harder to spot, -- and ...
Continue Reading

Key Ransomware Money Laundering Operation Taken Down and Owner Arrested in Greece

More than 4 Billion Dollars May Have Been Laundered If you’ve been the victim of a ransomware attack you know cybercrooks almost always demand payment in Bitcoin. Now we know that the US ...
Continue Reading

Cerber Ransomware Can Now Steal Bitcoin Wallet Data And Browser Passwords

The Russian 800-pound gorilla Dridex Banking Trojan gang who are also behind the Cerber ransomware have just upped their game. Cerber is part of the small set of professional ransomware ...
Continue Reading

CEO Fraud Attacks Were Far More Lucrative than Ransomware over the Past 3 Years

Cisco's midyear report released this week showed that CEO Fraud netted cybercrime five times more money than ransomware over the last three years. The surprising highlight of Cisco's ...
Continue Reading

Ransomware attack on KQED TV, Radio Station wiped out pre-recorded segments

KQED, a TV and radio station in San Francisco, is an example that shows how badly any organization can suffer when ransomware hits their network. KQED has been trying to recover from the ...
Continue Reading

Evil Corp Hires Criminal Hackers For Highly Targeted Ransomware Infections

So, here is something new...
Continue Reading

Business Braces for More Ransomware Assaults

Baseline Mag has a great slide show with the results of an ISACA survey (Information Systems Audit and Control Association), a nonprofit group for IT and information systems ...
Continue Reading

Cleveland Medical Associates Ransomware Infection Caused 22K-Record Databreach - How To Prevent This

Cleveland Medical Associates is offering about 22,000 patients identity protection services after a ransomware attack against the practice. The practice is offering a year of protective ...
Continue Reading

NotPetya "ransomware" Froze Business At Global Law Firm DLA Piper

Kate Fazzini and Adam Janofsky at the Wall Street Journal wrote an excellent piece about the dangers of becoming collateral in global cyber warfare. They wrote: "This week’s “Petya” ...
Continue Reading

[ALERT] NotPetya Is a Cyber Weapon, Not Ransomware

Yesterday morning, after monitoring this new outbreak for 24 hours, I came to the conclusion we were dealing with cyber warfare , and not ransomware . Two separate reports coming from ...
Continue Reading

[ALERT] Looks Like A New Worldwide Ransomware Outbreak

Motherboard reported: "A quickly-spreading, world-wide ransomware outbreak has reportedly hit targets in Spain, France, Ukraine, Russia, and other countries. This strain is deadlier than ...
Continue Reading

Windows 10 Stops Ransomware Cold? Not So Fast!

Recently, Microsoft claimed that no known ransomware could penetrate the new Win10 Creators Update.
Continue Reading

Web Hosting Provider Pays $1 Million to Ransomware Attackers

South Korean web hosting company Nayana agreed to pay $1 million in Bitcoin after a ransomware attack hit 153 Linux servers. The attack took place June 10 and resulted in over 3,400 ...
Continue Reading

[ALERT] New Fileless, Code-injecting Ransomware Bypasses Antivirus

Security researchers have discovered a new fileless ransomware in the wild, which injects malicious code into a legitimate system process (svchost.exe) on a targeted system and then ...
Continue Reading

FIN10: Anatomy of a Ransomware Phishing Extortion Operation

Cyber security firm FireEye reported that that a number of Canadian mines and casinos were hacked by a group named FIN10 – FireEye labels FIN10 to be “one of the most disruptive threat ...
Continue Reading

Did WannaCry Ransomware Escape North Korean Containment?

Mike Mimoso at Kaspersky's Threatpost blog raised the theory that the ransomware wasn’t contained properly and spread before it was meant to be unleashed. Malware expert Jake Williams, ...
Continue Reading

This Ransomware Targets HR Departments With Fake Job Applications

I missed this one a few months ago, but it's a great example how focused the bad guys are getting with their attacks, and you need to watch out for this social engineering attack vector ...
Continue Reading

Windows 10 Stops Ransomware Cold... Or Does It?

OK, finally there is some good news in the fight against ransomware!
Continue Reading

Have We Reached "Peak Ransomware"?

There was an article with the title: "Don’t panic: We’ve reached ‘peak ransomware’" in a publication called The Memo. They decided to ask an expert: Rik Ferguson, VP of security research ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews