Remove 2021 Remove Encryption Remove Healthcare Remove Manufacturing
article thumbnail

New RA Group ransomware gang is the latest group using leaked Babuk source code

Security Affairs

Compromised organizations operate in different business verticals, including manufacturing, wealth management, insurance providers, and pharmaceuticals. The ransomware supports intermittent encryption to speed up the encryption process. GAGUP” to the name of the encrypted files. .”

article thumbnail

China-linked APT Bronze Starlight deploys ransomware as a smokescreen

Security Affairs

The victims include pharmaceutical companies in Brazil and the U.S., based media organization with offices in China and Hong Kong, electronic component designers and manufacturers in Lithuania and Japan, a law firm in the U.S., and an aerospace and defense division of an Indian conglomerate.

article thumbnail

Connecting the Bots – Hancitor fuels Cuba Ransomware Operations

Security Affairs

Hancitor became another commodity malware which partnered with ransomware gangs to help them gain initial access to target networks – the increasing trend outlined by Group-IB researchers in the recent Ransomware Uncovered 2020/2021 report. Files are encrypted using ChaCha20 with 12-bytes length IV.