article thumbnail

8Base ransomware operators use a new variant of the Phobos ransomware

Security Affairs

The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. Security experts attributed 67 attacks to the group in May 2023, most of the victims are in the U.S. and Brazil.

article thumbnail

LockFile Ransomware uses a new intermittent encryption technique

Security Affairs

The operators behind LockFile ransomware encrypt alternate blocks of 16 bytes in a document to evade detection. Instead, LockFile encrypts every other 16 bytes of a document. This means that a file such as a text document remains partially readable and looks statistically like the original. ” states Sophos.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Balikbayan Foxes group spoofs Philippine gov to spread RATs

Security Affairs

Both Remcos and NanoCore are used for information gathering, data exfiltration, surveillance, and control of the victims’ computers. . The group focuses on Shipping/Logistics, Manufacturing, Business Services, Pharmaceutical, and Energy entities, among others. ” reads the analysis published by the experts. .

article thumbnail

Experts warn of a spike in May and June of 8Base ransomware attacks

Security Affairs

The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. ” Security experts attributed 67 attacks to the group in May 2023, most of the victims are in the U.S. and Brazil.

article thumbnail

The Week in Cyber Security and Data Privacy: 30 October – 5 November 2023

IT Governance

Records breached: Unknown ALPHV/BlackCat publishes data exfiltrated from the Town of Iowa, Louisiana Date of breach: Unknown Breached organisation: The Town of Iowa, Louisiana Incident details: The ALPHV/BlackCat ransomware gang has published approximately 250 documents that it exfiltrated from the Town of Iowa in Louisiana.

article thumbnail

New Leak Shows Business Side of China’s APT Menace

Krebs on Security

A large cache of more than 500 documents published to GitHub last week indicate the records come from i-SOON , a technology company headquartered in Shanghai that is perhaps best known for providing cybersecurity training courses throughout China. A marketing slide deck promoting i-SOON’s Advanced Persistent Threat (APT) capabilities.

article thumbnail

Vera to Power Canon Solutions America’s New Security Solutions and Services Strategy

Info Source

At that moment, we knew we had an offering that would help our customers collaborate and share content without compromising security. ” Vera’s innovative data-centric security platform gives customers the ability to encrypt, track, and help control how content is accessed, or how it’s shared. .”