Analysis of well-known Iranian hacking group points to more purely financial attacks

The government-linked hacking activity is both an intel-gathering effort as well as a money maker, researchers say.

The post Analysis of well-known Iranian hacking group points to more purely financial attacks appeared first on CyberScoop.

Continue reading Analysis of well-known Iranian hacking group points to more purely financial attacks

Inside the FBI’s quiet ‘ransomware summit’

In March, officials in sparsely populated Jackson County, Georgia, made a painful decision. Rather than rebuild their networks from scratch, they paid $400,000 to hackers to get the county’s data back. The six-figure amount — eclipsed by a nearly $600,000 payment made by a Florida city in June — is symptomatic of a much larger problem. Across the U.S., poorly secured businesses, local governments, and schools have lost millions of dollars to attackers who can cheaply buy access to ransomware-as-a-service kits on underground forums. The problem is by some measures growing more acute: Over 100 public-sector ransomware attacks have been reported in 2019 alone, double the amount in 2018. To help stem the tide of file-locking attacks, the FBI quietly convened the country’s top ransomware experts in an unprecedented, closed-door conference in September. The briefings, which occurred over two days, were a recognition by law enforcement officials that their ability to […]

The post Inside the FBI’s quiet ‘ransomware summit’ appeared first on CyberScoop.

Continue reading Inside the FBI’s quiet ‘ransomware summit’

Fileless Malware on the Rise

According to reports analyzing the state of the threat landscape, fileless malware incidents are up to some 265% in the first half of 2019 when compared to the same period in 2018. Fileless malware sometimes has been referred to as a zero-footprint at… Continue reading Fileless Malware on the Rise

Post GandCrab, Cybercriminals Scouring the Dark Web for the Next Top Ransomware

A detailed look at underground forums shows that cybercriminals aren’t sure where to look on the heels of the GandCrab ransomware group shutting its doors – and low-level actors are taking advantage of that by developing their own strains. Continue reading Post GandCrab, Cybercriminals Scouring the Dark Web for the Next Top Ransomware

Robinhood Ransomware “CoolMaker” Functions Not So Cool

Robinhood Ransomware is attacking government institutions from Greenville to Baltimore. How does it work and how could you stop it? Find out here.
The post Robinhood Ransomware “CoolMaker” Functions Not So Cool appeared first on Security Boulevard.
Continue reading Robinhood Ransomware “CoolMaker” Functions Not So Cool

SamSam outbreak led to FBI restructuring, top official says

The notorious SamSam ransomware — which extracted $6 million in payments from more than 200 victim organizations — forced the FBI to adjust its model for handling cyberattack investigations, a senior bureau official said Thursday. Nearly all 56 of the FBI’s field offices responded to SamSam incidents — an inefficient way of keeping up with the malware, said Tonya Ugoretz, deputy assistant director of the FBI’s Cyber Division. And so, in an example of how the FBI is trying to adapt to an era of unceasing cyberthreats to U.S. businesses, the bureau changed its investigative structure. “We developed a model whereby when there is a certain type of malicious strain or certain type of threat actor, we have one office that’s in charge, we have other offices running supporting investigations that are feeding up into that,” Ugoretz said at the Cybersecurity Leadership Forum presented by Forcepoint and produced by CyberScoop and […]

The post SamSam outbreak led to FBI restructuring, top official says appeared first on CyberScoop.

Continue reading SamSam outbreak led to FBI restructuring, top official says