Remove Government Remove Groups Remove Insurance
article thumbnail

Australian government announced sanctions for Medibank hacker

Security Affairs

The Australian government announced sanctions for a member of the REvil ransomware group for the Medibank hack that occurred in 2022. The Australian government announced sanctions for Aleksandr Gennadievich Ermakov (aka GustaveDore, aiiis_ermak, blade_runner, JimJones), a Russian national who is a member of the REvil ransomware group.

article thumbnail

Iran-linked APT group Pioneer Kitten sells access to hacked networks

Security Affairs

Iran-linked APT group Pioneer Kitten is now trying to monetize its efforts by selling access to some of the networks it has hacked to other hackers. Iran-linked APT group Pioneer Kitten, also known as Fox Kitten or Parisite, is now trying to monetize its efforts by selling access to some of the networks it has hacked to other hackers.

Access 326
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

Krebs on Security

healthcare giant Change Healthcare has made a $22 million extortion payment to the infamous BlackCat ransomware group (a.k.a. As part of that action, the government seized the BlackCat website and released a decryption tool to help victims recover their systems. After a much-promoted attack on the government of Fulton County, Ga.,

article thumbnail

SilverTerrier gang uses COVID-19 lures in BEC attacks against healthcare, government organizations

Security Affairs

Nigerian cyber gang SilverTerrier, specialized in BEC attacks, used COVID-19 lures in recent attacks on healthcare and government organizations. 30), we have observed three SilverTerrier actors/groups launch a series of 10 COVID-19 themed malware campaigns.” “Over the past 90 days (Jan. ” continues the report.

article thumbnail

TA505 group updates tactics and expands the list of targets

Security Affairs

Recent campaigns show t hreat actors behind the Dridex and Locky malware families , the TA505 group, have updated tactics and expanded its target list. Trend Micro revealed that the TA505 group that is behind the Dridex and Locky malware families continue to make small changes to its operations. ” continues the report.

article thumbnail

Ransomware Victims That Pay Up Could Incur Steep Fines from Uncle Sam

Krebs on Security

federal government if the crooks who profit from the attack are already under economic sanctions, the Treasury Department warned today. government, they still can be fined either way, said Ginger Faulk , a partner in the Washington, D.C. Image: Shutterstock. jurisdiction) and making it a crime to transact with them.

article thumbnail

Previously undetected Earth Longzhi APT group is a subgroup of APT41

Security Affairs

Trend Micro reported that the Earth Longzhi group, a previously undocumented subgroup of APT41, targets Ukraine and Asian Countries. The experts attributed the attacks to a new subgroup of the China-linked APT41 group, tracked as Earth Longzhi. The tool developers and campaign operators share the tools with their collaborator groups.”

Archiving 246