Remove 2014 Remove Analysis Remove Encryption Remove Retail
article thumbnail

Report: Threat of Emotet and Ryuk

Security Affairs

Analyzing the general distribution of the compromised domains, grouped by category, it is possible to verify that the most affected were as follows: professional/companies (20.2%), personal (13.5%), retail (12.7%) and industry (11.9%). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. DOWNLOAD FULL REPORT.

article thumbnail

DoppelPaymer, a fork of BitPaymer Ransomware, appeared in the threat landscape

Security Affairs

Cybercrime gang tracked as TA505 has been active since 2014 and focusing on Retail and Banking industries. ” reads the analysis published by CrowdStrike. ” continues the analysis. For instance, file encryption is now threaded, which can increase the rate at which files are encrypted.”

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

TA505 is expanding its operations

Security Affairs

The threat group is also known for its recent attack campaign against Bank and Retail business sectors, but the latest evidence indicates a potential expansion of its criminal operation to other industries too. Technical Analysis. During the analysis, we also noticed the “veter 1605 _MAPS_10 cr0.exe” Part of extracted macro.

IT 69
article thumbnail

Maastricht University finally paid a 30 bitcoin ransom to crooks

Security Affairs

It is unclear if the attackers have exfiltrated data from the systems before encrypting them. The attacker focused on encrypting data files in the Windows domain. TA505 hacking group has been active since 2014 focusing on Retail and banking sectors. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

article thumbnail

Nodersok malware delivery campaign relies on advanced techniques

Security Affairs

” reads the analysis published by Microsoft. About 3% of the infected systems belong to organizations in different sectors, including education, professional services, healthcare, finance, and retail. based payload, and a bunch of encrypted files. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

article thumbnail

Croatia government agencies targeted with news SilentTrinity malware

Security Affairs

The phishing messages posed as delivery notifications from the Croatian postal or other retail services, they included a Microsoft Excel saved in the old.xls format and compiled the previous day. ” reads the analysis published by Positive Technologies. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

article thumbnail

Parasite HTTP RAT implements a broad range of protections and evasion mechanims

Security Affairs

” reads the analysis published by Proofpoint. ” continues the analysis. The malware was involved in a small email campaign targeting organizations primarily in the information technology, healthcare, and retail industries. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.