Collaborate Disseminate
An investigation of BlackJack’s software, TTPs, and motivations led Kaspersky experts to identify a possible connection with the Twelve group. Continue reading From 12 to 21: how we discovered connections between the Twelve and BlackJack groups
Analysis of Twelve’s activities using the Unified Kill Chain method: from initial access to deployment of LockBit- and Chaos-based ransomware and wipers. Continue reading -=TWELVE=- is back
In this report, Kaspersky researchers explore the most significant attacks of Q2 2024 that used a XZ backdoor, the LockBit builder, ShrinkLocker ransomware, etc. Continue reading IT threat evolution Q2 2024
Analysis of the hacktivist group Head Mare targeting companies in Russia and Belarus: exploitation of WinRAR vulnerability, custom tools PhantomDL and PhantomCore. Continue reading Head Mare: adventures of a unicorn in Russia and Belarus
Data includes names, dates of birth, physical addresses, Social Security Numbers, medical and diagnosis information, and health insurance details.
The post Carespring Data Breach Exposes Personal and Medical Information of Nearly 77,000 Patients appear… Continue reading Carespring Data Breach Exposes Personal and Medical Information of Nearly 77,000 Patients
A new report from cyber threat intelligence company Intel471 reveals that threat actors are infiltrating macOS. Continue reading Threat Actors Increasingly Target macOS, Report Finds
Kaspersky researchers investigated three ransomware groups that tapped newly built malware samples based on Babuk, Lockbit, Chaos and others, while lacking professional resources. Continue reading How “professional” ransomware variants boost cybercrime groups
Evolve Bank says personal information of more than 7.6 million individuals was compromised in a ransomware attack.
The post Evolve Bank Data Breach Impacts 7.6 Million People appeared first on SecurityWeek.
Continue reading Evolve Bank Data Breach Impacts 7.6 Million People
Most accomplished cybercriminals go out of their way to separate their real names from their hacker handles. But among certain old-school Russian hackers it is not uncommon to find major players who have done little to prevent people from figuring out who they are in real life. A case study in this phenomenon is “x999xx,” the nickname chosen by a venerated Russian hacker who specializes in providing the initial network access to various ransomware groups. Continue reading The Not-So-Secret Network Access Broker x999xx
Croatia’s biggest hospital, Zagreb Univ. Hospital Centre, was crippled by ransomware attack. LockBit 3.0 forced shutdown and data… Continue reading LockBit Hits Croatia’s Biggest Hospital, Demands Ransom for Data