Research reports
1,224 reports from 387 publishers45 added in the past week
6 reports, newest added first
Added Tue 5 May
The Darker Things
Today, on November 3, BlackMatter gang announced it was shutting its Ransomware-as-a-Service program due to the “pressure from the authorities”. However, it doesn’t mean that BlackMatter’s affiliates will stop malicious activity. They will most likely join…
Ransomware
Cat’s out of the bag: Lynx Ransomware-as-a-Service
Ransomware remains one of the most profitable cyberthreats, with new variants and business models evolving faster than many organizations can respond. Fueled by the expansion of Ransomware-as-a-Service (RaaS), the proliferation of stolen data on Dedicated…
Ransomware
ATT&CKing ProLock Ransomware
The success of enterprise ransomware attacks has motivated more and more threat actors to join the game. One of these new players is ProLock ransomware. The locker emerged in March 2020 as the successor of PwndLocker, which began operating in late 2019 and…
Ransomware
Inside the Hive
In the first 11 months of 2021, over 60% of all incidents investigated by Group-IB involved ransomware. Ransomware has finally established itself as cyber threat number one. In July 2021, international media reported that REvil ransomware operators demanded a…
Ransomware
Cybercriminal greeners from Iran attack companies worldwide for financial gain
Group-IB, a global threat hunting and intelligence company headquartered in Singapore, has detected financially motivated attacks carried out by Iranian newbie threat actors in June. The attackers used Dharma ransomware and a mix of publicly available tools…
RansomwareState-sponsored
Added Fri 1 May
Ransomware gang Conti published data of 850 companies
Group-IB, one of the global leaders in cybersecurity and headquartered in Singapore, has today presented its findings about ARMattack, one of the shortest yet most successful campaigns by the Russian-speaking ransomware gang Conti. In slightly more than a…
Ransomware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.