Ransomware

Doubleface Takes Down the Website of Donetsk International Airport

Doubleface ransomware, developed in C/C++, utilizes AES-128 and RSA-4096 encryption techniques. It remains undetected and includes anti-analysis features. Explore its key attributes, cost implications, and relevance in cybersecurity.

Dark Angels Received a Huge $75m Ransom Payment, Who Are They?

In early 2024, a Fortune 50 company paid the Dark Angels ransomware group a record $75 million ransom. Learn about Dark Angels' background, major attacks, and the technical details behind their biggest ransomware payment in history.

4 Types of Ransomware: Recognizing and Understanding the Threat

What are the main types of ransomware and how can you recognize them?

The Change Healthcare Ransomware Attack: A Landmark Cybersecurity Breach

Explore the impacts of the Change Healthcare ransomware attack, the largest healthcare cybersecurity incident in U.S. history. Learn about its causes, consequences, and ongoing fallout.

How High Level Cybercrime Groups Are Formed and Organized

We look at how organized cybercrime groups are formed and structured and how cybercriminals first connect online through hacking forums and dark web marketplaces, where they build reputations and specialize in roles like penetration testing, malware development, ransomware operations and money laundering. Over time, trusted partnerships and ad hoc "crews" emerge, which can formalize into defined criminal enterprises.

5 Reasons Why Ransomware Gangs Go Dormant and Re-Emerge

Ransomware gangs often go underground, only to resurface later, more formidable than before. Explore five reasons behind this dormancy, from evading law enforcement to upgrading attack techniques and adapting to market dynamics.

Ransomware Roundup Q1 2024

Our ransomware roundup Q1 2024 broke new records with 192 publicly disclosed ransomware attacks, an increase of 48% over 2023.

Top 5 MSP Cyberattacks in 2023/2024

In 2023 and 2024, several high-profile cyberattacks targeted managed service providers (MSPs), disrupting services for their clients. Learn about the top 5 MSP attacks during this period, including incidents at CTS, Tietoevry, Lumen Technologies, HTC Global Services, and Südwestfalen IT.

LockBit Ransomware Affiliates Leverage Citrix Bleed Vulnerability (CVE-2023-4966)

Citrix Bleed is being leveraged by LockBit ransomware affiliates to compromise organizations using CVE-2023-4966.

BlackFog Wins teissAwards2024 for Best Threat Intelligence Technology

BlackFog Wins teissAwards2024 for Best Threat Intelligence Technology