Analysis Document Encryption Manufacturing 
Security Affairs
AUGUST 31, 2021
Recently emerged LockFile ransomware family LockFile leverages a novel technique called intermittent encryption to speed up encryption. Sophos researchers discovered that the group is now leveraging a new technique called “intermittent encryption” to speed up the encryption process.
Security Affairs
MARCH 25, 2024
The malware StrelaStealer is an email credential stealer that DCSO_CyTec first documented in November 2022. The campaign targeted organizations in many sectors, including the high-tech, finance, legal services and manufacturing industries. “The JScript file then drops a Base64-encrypted file and a batch file. .
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
NOVEMBER 19, 2023
Phobos variants are usually distributed by the SmokeLoader , but in 8Base campaigns, it has the ransomware component embedded in its encrypted payloads. The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT.
Security Affairs
JUNE 28, 2023
The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. “New analysis from NCC Group’s Global Threat Intelligence team has revealed that ransomware attacks are soaring, with 436 victims in May. .
Security Affairs
NOVEMBER 20, 2020
The analysis of attacks where Egregor has been deployed revealed that the TTPs used by the threat actors are almost identical to the ones used by the ProLock operators, whose campaigns have been described in Group-IB blog post in May. Egregor’s favorite sectors are Manufacturing (28.9% ProLock = Egregor. of victims) and Retail (14.5%).
Krebs on Security
APRIL 26, 2019
But according to an in-depth analysis shared with KrebsOnSecurity by security researcher Paul Marrapese , iLnkP2P devices offer no authentication or encryption and can be easily enumerated, allowing potential attackers to establish a direct connection to these devices while bypassing any firewall restrictions.
Security Affairs
MAY 7, 2021
As of April 28, the site mentioned nine companies primarily from aviation, financial, education and manufacturing industries. An example of spam email content Clicking the malicious link obviously leads to downloading a weaponized document. Files are encrypted using ChaCha20 with 12-bytes length IV. About Group-IB.
Expert insights. Personalized for you.
108 
Let's personalize your content