Education File names Ransomware 
Security Affairs
DECEMBER 22, 2022
The Vice Society ransomware group has adopted new custom ransomware, with a strong encryption scheme, in recent intrusions. SentinelOne researchers discovered that the Vice Society ransomware gang has started using a custom ransomware that implements a robust encryption scheme, using NTRUEncrypt and ChaCha20-Poly1305 algorithms.
Security Affairs
APRIL 27, 2020
The operators behind the Shade Ransomware (Troldesh) shut down their operations and released over 750,000 decryption keys. Good news for the victims of the infamous Shade Ransomware , the operators behind the threat have shut down their operations and released over 750,000 decryption keys. SecurityAffairs – Shade Ransomware, hacking).
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security Affairs
APRIL 14, 2020
Recently organizations in healthcare, research, and government facilities have been hit by Coronavirus-themed attacks that deployed multiple malware families, including ransomware and information stealers (i.e. “The emails all contained a malicious Rich Text Format (RTF) phishing lure with the file name 20200323- sitrep -63- covid -19.
Security Affairs
JUNE 3, 2023
Experts noticed that the new Linux ransomware BlackSuit has significant similarities with the Royal ransomware family. Royal ransomware is one of the most notable ransomware families of 2022, it made the headlines in early May 2023 with the attack against the IT systems in Dallas, Texas. Extension: blacksuit.
Security Affairs
MAY 28, 2019
Experts at PaloAlto Networks spotted a new Shade ransomware campaigns targeting news countries, including in the U.S. Researchers observed a new wave of Shade ransomware attacks against targets in several countries, including the US and Japan. Moth of the victims belongs to high-tech, wholesale and education sectors.
Security Affairs
APRIL 24, 2021
“The bot is embedded into the ToxicEye RAT configuration file and compiled into an executable file (an example of a file name we found was ‘paypal checker by saint.exe’). Experts also noticed that the RAT implements Ransomware features such as the ability to encrypt and decrypt victim’s files.
Security Affairs
APRIL 10, 2023
Iran-linked APT group MERCURY is behind destructive attacks on hybrid environments masquerading as a ransomware operation. Threat actors masqueraded the attacks as a standard ransomware operation. Once bypassed the security defenses, the attackers deployed the ransomware payload in the NETLOGON shares on several domain controllers.
Expert insights. Personalized for you.
363 
Let's personalize your content