By Luke Leal – Over the past few weeks, we’ve seen an increase in Troldesh ransomware using compromised websites as intermediary malware distributors. The malware often uses a PHP file that acts as a delivery tool for downloading the host malware dropper: … Continue reading →
Most ransomware that we’ve seen is usually deployed via some sort of phishing attack. The victim gets an email, they click on an attachment or a link, the ransomware gets loaded, and from there it starts spreading through the network, … Continue reading →
By Lawrence Abrams – This was not a very busy week, with mostly new variants of STOP Djvu and Dharma being released. The bad news is that the RIG exploit kit was discovered distributing the GetCrypt Ransomware through PopCash malvertising … Continue reading →
By SEAN GALLAGHER – Systems at a number of Baltimore’s city government departments were taken offline on May 7 by a ransomware attack. As of 9:00am today, email and other services remain offline. Police, fire, and emergency response systems have … Continue reading →
By Danny Palmer – A successful family of ransomware which has been terrorising organisations around the world has been updated with a new trick to lure victims into installing file-locking malware: posing as anti-virus software. Dharma first emerged in 2016 and the ransomware has … Continue reading →
By Jai Vijayan – Ransomware attacks may be declining in number but almost every other metric related to the threat is trending upward: higher ransom payments, more downtime loss, and longer recovery time. Those are some of the findings from … Continue reading →
Written by Barracuda MSP Guest Blogger – As a managed services provider (MSP), you want to ensure that your clients’ networks, servers, data, and applications remain secure. You don’t want to overlook any gaps in their cybersecurity defenses that could … Continue reading →
Ransomware has long been the scourge of the cybersecurity industry. When that extortionate hacking goes beyond encrypting files to fully paralyze computers across a company, it represents not just a mere shakedown, but a crippling disruption. Now a nasty new breed … Continue reading →
By Caroline Seymour – In January, a ransomware attack on the city of Del Rio, Texas, shut down City Hall servers and forced officials to resort to pen and paper to provide services. The city of Sammamish, Wash., also had to declare … Continue reading →
By Catalin Cimpanu – Avast and Emsisoft, two cyber-security firms known for their antivirus products, released today free decrypters that can help victims of the BigBobRoss ransomware recover their files without paying the ransom demand. The two decrypters are available for download … Continue reading →