ransomware Archives - Page 2 of 7 - ThreatsHub Cybersecurity News

DEV-0569 finds new ways to deliver Royal ransomware, various payloads

November 17, 2022 TH Author Cybersecurity, Microsoft security intelligence, Phishing, ransomware

DEV-0569’s recent activity shows their reliance on malvertising and phishing in delivering malicious payloads. The group’s changes and updates in delivery and payload led to distribution of info stealers and Royal ransomware.
The post DEV-0569 finds new ways to deliver Royal ransomware, various payloads appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

Stopping C2 communications in human-operated ransomware through network protection

November 3, 2022 TH Author C2, command and control, Cybersecurity, human-operated ransomware, Microsoft, Microsoft security intelligence, Network protection, ransomware, Security

Providing advanced protection against increasingly sophisticated human-operated ransomware, Microsoft Defender for Endpoint’s network protection leverages threat intelligence and machine learning to block command-and-control (C2) communications.
The post Stopping C2 communications in human-operated ransomware through network protection appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity

October 27, 2022 TH Author Cybersecurity, Microsoft security intelligence, ransomware

Microsoft has discovered recent activity indicating that the Raspberry Robin worm is part of a complex and interconnected malware ecosystem, with links to other malware families and alternate infection methods beyond its original USB drive spread.
The post Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector

October 25, 2022 TH Author Cybersecurity, Microsoft, Microsoft security intelligence, ransomware, Security

In recent months, Microsoft has detected active ransomware and extortion campaigns impacting the global education sector, particularly in the US, by a threat actor we track as DEV-0832, also known as Vice Society.
The post DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

Defenders beware: A case for post-ransomware investigations

October 18, 2022 TH Author Cybersecurity, Microsoft Detection and Response Team (DART), Microsoft security intelligence, ransomware

The Microsoft Detection and Response Team (DART) details a recent ransomware incident in which the attacker used a collection of commodity tools and techniques, such as using living-off-the-land binaries, to launch their malicious code.
The post Defenders beware: A case for post-ransomware investigations appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

New “Prestige” ransomware impacts organizations in Ukraine and Poland

October 14, 2022 TH Author Cybersecurity, Microsoft security intelligence, Prestige, ransomware

The Microsoft Threat Intelligence Center (MSTIC) has identified evidence of a novel ransomware campaign targeting organizations in the logistics and transportation industry in Ukraine and Poland utilizing a previously unidentified ransomware payload.
The post New “Prestige” ransomware impacts organizations in Ukraine and Poland appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

Stop Ransomware with Microsoft Security digital event presents threat intelligence in action

August 31, 2022 TH Author Cybersecurity, ransomware, Threat protection

Join the Stop Ransomware with Microsoft Security digital event on September 15, 2022, to learn how to safeguard your organization from today’s attacks—and be ready for tomorrow’s.
The post Stop Ransomware with Microsoft Security digital event presents threat intelligence in action appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

Cyber Signals: 3 strategies for protection against ransomware

August 30, 2022 TH Author Cybersecurity, ransomware

New Cyber Signals shows more than 80 percent of ransomware attacks can be traced to common configuration errors. Here’s how we can get ahead of these attacks together as a cyber defender community.
The post Cyber Signals: 3 strategies for protection against ransomware appeared first on Microsoft Security Blog. READ MORE HERE…

Microsoft Secure

North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware

July 14, 2022 TH Author Cybersecurity, H0lyGh0st, Microsoft security intelligence, MSTIC, ransomware

A group of actors originating from North Korea that MSTIC tracks as DEV-0530 has been developing and using ransomware in attacks since June 2021. This group, which calls itself H0lyGh0st, utilizes a ransomware payload with the same name.
The post North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware appeared first on Microsoft Security Blog. READ MORE HERE…