GOLD SOUTHFIELD

New Ransomware Tactic: Adversaries Target ESXi Servers | CrowdStrike

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor New Ransomware Tactic: Adversaries Target ESXi Servers | CrowdStrike

Cause & Effect: Sodinokibi Ransomware Analysis | Tetra Defense

date ORKL added it fromORKL

The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor Cause & Effect: Sodinokibi Ransomware Analysis | Tetra Defense

Scully Spider, TA547 - Threat Group Cards: A Threat Actor Encyclopedia

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Scully Spider, TA547 - Threat Group Cards: A Threat Actor Encyclopedia

Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting

Malware analysis: part 7. Yara rule example for CRC32. CRC32 in REvil ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware analysis: part 7. Yara rule example for CRC32. CRC32 in REvil ransomware

Following the Scent of TrickGate: 6-Year-Old Packer Used to Deploy the Most Wanted Malware - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Following the Scent of TrickGate: 6-Year-Old Packer Used to Deploy the Most Wanted Malware - Check Point Research

LockBit 3.0 Being Distributed via Amadey Bot - ASEC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LockBit 3.0 Being Distributed via Amadey Bot - ASEC

Gootkit Loader’s Updated Tactics and Fileless Delivery of Cobalt Strike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Gootkit Loader’s Updated Tactics and Fileless Delivery of Cobalt Strike

Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

REvil Development Adds Confidence About GOLD SOUTHFIELD Reemergence

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor REvil Development Adds Confidence About GOLD SOUTHFIELD Reemergence

REvil ransomware returns: New malware sample confirms gang is back

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware returns: New malware sample confirms gang is back

REvil's TOR sites come alive to redirect to new ransomware operation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil's TOR sites come alive to redirect to new ransomware operation

Resource Center | ConnectWise

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Resource Center | ConnectWise

The Ransomware Files, Episode 6: Kaseya and REvil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Ransomware Files, Episode 6: Kaseya and REvil

Gone in 52 Seconds…and 42 Minutes: A Comparative Analysis of Ransomware Encryption Speed | Splunk

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Gone in 52 Seconds…and 42 Minutes: A Comparative Analysis of Ransomware Encryption Speed | Splunk

Navigating New Frontiers: Trend Micro 2021 Annual Cybersecurity Report

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Navigating New Frontiers: Trend Micro 2021 Annual Cybersecurity Report

Uncompromised: When REvil comes knocking

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Uncompromised: When REvil comes knocking

Sodinokibi/REvil Ransomware Defendant Extradited to United States and Arraigned in Texas

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi/REvil Ransomware Defendant Extradited to United States and Arraigned in Texas

An Empirically Comparative Analysis of Ransomware Binaries

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor An Empirically Comparative Analysis of Ransomware Binaries

History-of-REvil.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor History-of-REvil.pdf

ALPHV ransomware gang analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV ransomware gang analysis

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

Федеральная Служба Безопасности ( Официальное сообщение )

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Федеральная Служба Безопасности ( Официальное сообщение )

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

Ransomware Spotlight: REvil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Spotlight: REvil

Evil Corp: 'My hunt for the world's most wanted hackers'

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Evil Corp: 'My hunt for the world's most wanted hackers'

Global Operations Lead to Arrests of Alleged Members of GandCrab REvil and Cl0p Cartels

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Global Operations Lead to Arrests of Alleged Members of GandCrab REvil and Cl0p Cartels

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

«Он не выходит на связь»: что известно о барнаульце, объявленном в розыск ФБР по обвинению в киберпреступлениях

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor «Он не выходит на связь»: что известно о барнаульце, объявленном в розыск ФБР по обвинению в киберпреступлениях

gov.uscourts.txnd.351760.1.0_3.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor gov.uscourts.txnd.351760.1.0_3.pdf

Ukrainian Arrested and Charged with Ransomware Attack on Kaseya

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ukrainian Arrested and Charged with Ransomware Attack on Kaseya

REvil Ransom Arrest, $6M Seizure, and $10M Reward

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil Ransom Arrest, $6M Seizure, and $10M Reward

gov.uscourts.txnd.352371.1.0_1.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor gov.uscourts.txnd.352371.1.0_1.pdf

FinCEN Ransomware Advisory

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FinCEN Ransomware Advisory

Treasury Continues to Counter Ransomware as Part of Whole-of-Government Effort; Sanctions Ransomware Operators and Virtual Currency Exchange

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Treasury Continues to Counter Ransomware as Part of Whole-of-Government Effort; Sanctions Ransomware Operators and Virtual Currency Exchange

US arrests and charges Ukrainian man for Kaseya ransomware attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor US arrests and charges Ukrainian man for Kaseya ransomware attack

Five affiliates to Sodinokibi/REvil unplugged

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Five affiliates to Sodinokibi/REvil unplugged

CARBON SPIDER Embraces Big Game Hunting, Part 2 | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CARBON SPIDER Embraces Big Game Hunting, Part 2 | CrowdStrike

CARBON SPIDER Embraces Big Game Hunting, Part 2

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor CARBON SPIDER Embraces Big Game Hunting, Part 2

Advanced IP Scanner: the preferred scanner in the A(P)T toolbox

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Advanced IP Scanner: the preferred scanner in the A(P)T toolbox

REvil Disappears Again: 'Something Is Rotten in the State of Ransomware'

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil Disappears Again: 'Something Is Rotten in the State of Ransomware'

REvil ransomware shuts down again after Tor sites were hijacked

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware shuts down again after Tor sites were hijacked

ECX- Big Game Hunting on the Rise Following a Notable Reduction in Activity

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor ECX- Big Game Hunting on the Rise Following a Notable Reduction in Activity

Big Game Hunting on the Rise Again According to eCrime Index

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Big Game Hunting on the Rise Again According to eCrime Index

Secure AI Build Resilience & Accelerate Value with Accenture

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure AI Build Resilience & Accelerate Value with Accenture

Ransomware as a Service: Enabler of Widespread Attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware as a Service: Enabler of Widespread Attacks

Russian hacker Q&A: An Interview With REvil-Affiliated Ransomware Contractor

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Russian hacker Q&A: An Interview With REvil-Affiliated Ransomware Contractor

REvil’s “Cryptobackdoor” Con: Ransomware Group’s Tactics Roil Affiliates, Sparking a Fallout

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil’s “Cryptobackdoor” Con: Ransomware Group’s Tactics Roil Affiliates, Sparking a Fallout

REvil ransomware devs added a backdoor to cheat affiliates

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware devs added a backdoor to cheat affiliates

REvil Ransomware Reemerges After Shutdown; Universal Decryptor Released

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor REvil Ransomware Reemerges After Shutdown; Universal Decryptor Released

Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack

Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Big Game Hunting TTPs Continue to Shift After DarkSide Pipeline Attack

REvil ransomware's servers mysteriously come back online

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware's servers mysteriously come back online

Hypervisor Jackpotting, Part 2- eCrime Actors Increase Targeting of ESXi Servers with Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hypervisor Jackpotting, Part 2- eCrime Actors Increase Targeting of ESXi Servers with Ransomware

CARBON SPIDER Embraces Big Game Hunting, Part 1 | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CARBON SPIDER Embraces Big Game Hunting, Part 1 | CrowdStrike

CARBON SPIDER Embraces Big Game Hunting, Part 1

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor CARBON SPIDER Embraces Big Game Hunting, Part 1

Hypervisor Jackpotting, Part 2: eCrime Actors Increase Targeting of ESXi Servers with Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hypervisor Jackpotting, Part 2: eCrime Actors Increase Targeting of ESXi Servers with Ransomware

Reverse Engineering Crypto Functions: RC4 and Salsa20

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Reverse Engineering Crypto Functions: RC4 and Salsa20

又見 REvil？！看駭客如何利用 REvil 同款加密勒索程式湮滅攻擊證據

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 又見 REvil？！看駭客如何利用 REvil 同款加密勒索程式湮滅攻擊證據

Title

file creation date fromORKL

Archived copy on ORKL Detailsfor Title

The Ransomware Threat (White Paper)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Ransomware Threat (White Paper)

Kaseya's universal REvil decryption key leaked on a hacking forum

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Kaseya's universal REvil decryption key leaked on a hacking forum

REvil Master Key for Kaseya Attack Posted to XSS

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil Master Key for Kaseya Attack Posted to XSS

Ransomware Gangs and the Name Game Distraction

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Gangs and the Name Game Distraction

Supply Chain Attacks from a Managed Detection and Response Perspective

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Supply Chain Attacks from a Managed Detection and Response Perspective

An interview with BlackMatter: A new ransomware group that's learning from the mistakes of DarkSide and REvil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An interview with BlackMatter: A new ransomware group that's learning from the mistakes of DarkSide and REvil

BlackMatter ransomware gang rises from the ashes of DarkSide, REvil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackMatter ransomware gang rises from the ashes of DarkSide, REvil

Chatter Indicates BlackMatter as REvil Successor

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Chatter Indicates BlackMatter as REvil Successor

Kaseya obtains universal decryptor for REvil ransomware victims

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Kaseya obtains universal decryptor for REvil ransomware victims

The Hunt to Find Origins of Kaseya's VSA Mass Ransomware Incident

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Hunt to Find Origins of Kaseya's VSA Mass Ransomware Incident

REvil Revealed: Tracking a Ransomware Negotiation and Payment

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil Revealed: Tracking a Ransomware Negotiation and Payment

Vidar and GandCrab: stealer and ransomware combo observed in the wild

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Vidar and GandCrab: stealer and ransomware combo observed in the wild

REvil ransomware gang's web sites mysteriously shut down

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware gang's web sites mysteriously shut down

Ransomware Giant REvil’s Sites Disappear

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Giant REvil’s Sites Disappear

REvil-ution – A Persistent Ransomware Operation

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor REvil-ution – A Persistent Ransomware Operation

REvil-ution - A Persistent Ransomware Operation - CYJAX

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil-ution - A Persistent Ransomware Operation - CYJAX

Ransomwhere project wants to create a database of past ransomware payments

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomwhere project wants to create a database of past ransomware payments

Ransomware Gangs: Ocean's 11 of Cybercrime - Evolving Roles Revealed

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Gangs: Ocean's 11 of Cybercrime - Evolving Roles Revealed

FLINT-Kaseya-Another%20Massive%20Heist%20by%20REvil.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FLINT-Kaseya-Another%20Massive%20Heist%20by%20REvil.pdf

Observations and Recommendations from the Ongoing REvil-Kaseya Incident

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Observations and Recommendations from the Ongoing REvil-Kaseya Incident

Netskope Threat Coverage: REvil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Netskope Threat Coverage: REvil

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/diving-deeper-into-the-kaseya-vsa-attack-revil-returns-and-other-hackers-are-riding-their-coattails/

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/diving-deeper-into-the-kaseya-vsa-attack-revil-returns-and-other-hackers-are-riding-their-coattails/

How CrowdStrike Stops Ransomware Used in the Kaseya Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How CrowdStrike Stops Ransomware Used in the Kaseya Attack

How CrowdStrike Falcon Stops REvil Ransomware Used in the Kaseya Attack

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor How CrowdStrike Falcon Stops REvil Ransomware Used in the Kaseya Attack

Elastic Security prevents 100% of REvil ransomware samples

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Elastic Security prevents 100% of REvil ransomware samples

KASEYA Supply Chain Ransomware Attack | Zscaler Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor KASEYA Supply Chain Ransomware Attack | Zscaler Blog

How the Kaseya VSA Zero Day Exploit Worked - Trulysuper

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How the Kaseya VSA Zero Day Exploit Worked - Trulysuper

Cybereason vs. REvil Ransomware: The Kaseya Chronicles

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybereason vs. REvil Ransomware: The Kaseya Chronicles

REvil Ransomware Threat Research Update and Detections | Splunk

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil Ransomware Threat Research Update and Detections | Splunk

Understanding REvil: REvil Threat Actors May Have Returned (Updated)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Understanding REvil: REvil Threat Actors May Have Returned (Updated)

The Evolution of PINCHY SPIDER from GandCrab to REvil | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Evolution of PINCHY SPIDER from GandCrab to REvil | CrowdStrike

The Evolution of PINCHY SPIDER from GandCrab to REvil

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The Evolution of PINCHY SPIDER from GandCrab to REvil

REvil ransomware attack against MSPs and its clients around the world

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware attack against MSPs and its clients around the world

Kaseya, Sera. What REvil Shall Encrypt, Shall Encrypt | Splunk

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Kaseya, Sera. What REvil Shall Encrypt, Shall Encrypt | Splunk

CISA-FBI Guidance for MSPs and their Customers Affected by the Kaseya VSA Supply-Chain Ransomware Attack | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CISA-FBI Guidance for MSPs and their Customers Affected by the Kaseya VSA Supply-Chain Ransomware Attack | CISA

Kaseya Supply-Chain Attack Targeting MSPs to Deliver REvil Ransomware - Truesec

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Kaseya Supply-Chain Attack Targeting MSPs to Deliver REvil Ransomware - Truesec

Update Regarding VSA Security Incident

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Update Regarding VSA Security Incident

Threat Brief: Kaseya VSA Ransomware Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Brief: Kaseya VSA Ransomware Attack

Kaseya Ransomware Supply Chain Attack: What You Need To Know

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Kaseya Ransomware Supply Chain Attack: What You Need To Know

REvil ransomware hits 1,000+ companies in MSP supply-chain attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware hits 1,000+ companies in MSP supply-chain attack

https://gist.githubusercontent.com/fwosar/a63e1249bfccb8395b961d3d780c0354/raw/312b2bbc566cbee2dac7b143dc143c1913ddb729/revil.json

Malpedia library date fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor https://gist.githubusercontent.com/fwosar/a63e1249bfccb8395b961d3d780c0354/raw/312b2bbc566cbee2dac7b143dc143c1913ddb729/revil.json

REvil ransomware gang executes supply chain attack via malicious Kaseya update

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware gang executes supply chain attack via malicious Kaseya update

Most Prolific Ransomware Families for Defenders

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Most Prolific Ransomware Families for Defenders

Deep analysis of REvil Ransomware | Written in Korean

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Deep analysis of REvil Ransomware | Written in Korean

LV Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor LV Ransomware

How Initial Access Brokers Lead to Ransomware | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How Initial Access Brokers Lead to Ransomware | Proofpoint US

Ransomware Double Extortion and Beyond: REvil, Clop, and Conti

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Double Extortion and Beyond: REvil, Clop, and Conti

REvil: the usage of legitimate remote admin tooling

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil: the usage of legitimate remote admin tooling

Prometheus Ransomware Gang: A Group of REvil?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Prometheus Ransomware Gang: A Group of REvil?

Introducing The Most Profitable Ransomware REvil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Introducing The Most Profitable Ransomware REvil

Introducing The Most Profitable Ransomware REvil

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Introducing The Most Profitable Ransomware REvil

FBI: REvil cybergang behind the JBS ransomware attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FBI: REvil cybergang behind the JBS ransomware attack

How to Defend Against Conti, DarkSide, REvil and Other Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How to Defend Against Conti, DarkSide, REvil and Other Ransomware

W4 May | EN | Story of the week: Ransomware on the Darkweb

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor W4 May | EN | Story of the week: Ransomware on the Darkweb

Response When Minutes Matter- When Good Tools Are Used for (R)Evil

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Response When Minutes Matter- When Good Tools Are Used for (R)Evil

Response When Minutes Matter: When Good Tools Are Used for (R)Evil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Response When Minutes Matter: When Good Tools Are Used for (R)Evil

Darkside gang estimated to have made over $90 million from ransomware attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Darkside gang estimated to have made over $90 million from ransomware attacks

DarkSide ransomware made $90 million in just nine months

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DarkSide ransomware made $90 million in just nine months

Darkside ransomware gang says it lost control of its servers & money a day after Biden threat

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Darkside ransomware gang says it lost control of its servers & money a day after Biden threat

Popular Russian hacking forum XSS bans all ransomware topics

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Popular Russian hacking forum XSS bans all ransomware topics

Ransomware world in 2021: who, how and why

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware world in 2021: who, how and why

DarkSide Ransomware Links to REvil Group Difficult to Dismiss

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DarkSide Ransomware Links to REvil Group Difficult to Dismiss

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

Intel 471

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Intel 471

Sodinokibi Ransomware Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware Analysis

Sodinokibi REvil ransomware disrupt trade secrets

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Sodinokibi REvil ransomware disrupt trade secrets

Ransomware Attack Vectors shift as New Software Vulnerability Exploits Abound

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Attack Vectors shift as New Software Vulnerability Exploits Abound

Ransomware and Data Leak Site Publication Time Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware and Data Leak Site Publication Time Analysis

Axis of REvil: What we know about the hacker collective taunting Apple

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Axis of REvil: What we know about the hacker collective taunting Apple

REvil gang tries to extort Apple, threatens to sell stolen blueprints

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil gang tries to extort Apple, threatens to sell stolen blueprints

Sodinokibi (aka REvil) Ransomware

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor Sodinokibi (aka REvil) Ransomware

Quarterly Report: Incident Response trends from Winter 2020-21

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Quarterly Report: Incident Response trends from Winter 2020-21

REvil ransomware has a new ‘Windows Safe Mode’ encryption mode

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware has a new ‘Windows Safe Mode’ encryption mode

unit42-ransomware-threat-report-2021.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor unit42-ransomware-threat-report-2021.pdf

I scrounged through the trash heaps ... now I'm a millionaire:' An interview with REvil's Unknown

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor I scrounged through the trash heaps ... now I'm a millionaire:' An interview with REvil's Unknown

CL0P and REvil Escalate Their Ransomware Tactics

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CL0P and REvil Escalate Their Ransomware Tactics

Ransomware negotiations: An inside look at the process

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware negotiations: An inside look at the process

Cyber Threats 2020: A Year in Retrospect

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Threats 2020: A Year in Retrospect

Hypervisor Jackpotting- CARBON SPIDER and SPRITE SPIDER Target ESXi Servers With Ransomware to Maximize Impact

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hypervisor Jackpotting- CARBON SPIDER and SPRITE SPIDER Target ESXi Servers With Ransomware to Maximize Impact

New Ransomware Tactic: Adversaries Target ESXi Servers | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Ransomware Tactic: Adversaries Target ESXi Servers | CrowdStrike

Hypervisor Jackpotting - CARBON SPIDER and SPRITE SPIDER Target ESXi Servers with Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hypervisor Jackpotting - CARBON SPIDER and SPRITE SPIDER Target ESXi Servers with Ransomware

Report2021GTR.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Report2021GTR.pdf

The_CrowdStrike_2021_Global_Threat_Report

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The_CrowdStrike_2021_Global_Threat_Report

CTI-League-Darknet-Report-2021.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CTI-League-Darknet-Report-2021.pdf

Probable Iranian Cyber Actors, Static Kitten, Conducting Cyberespionage Campaign Targeting UAE and Kuwait Government Agencies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Probable Iranian Cyber Actors, Static Kitten, Conducting Cyberespionage Campaign Targeting UAE and Kuwait Government Agencies

Probable Iranian Cyber Actors, Static Kitten, Conducting Cyberespionage Campaign Targeting UAE and Kuwait Government Agencies

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Probable Iranian Cyber Actors, Static Kitten, Conducting Cyberespionage Campaign Targeting UAE and Kuwait Government Agencies

BlueCrab 랜섬웨어, 기업 환경에서는 CobaltStrike 해킹툴 설치 - ASEC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlueCrab 랜섬웨어, 기업 환경에서는 CobaltStrike 해킹툴 설치 - ASEC

지속적으로 탐지 우회를 시도 중인 BlueCrab 랜섬웨어 - ASEC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 지속적으로 탐지 우회를 시도 중인 BlueCrab 랜섬웨어 - ASEC

Examining a Sodinokibi Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Examining a Sodinokibi Attack

Powershell Dropping a REvil Ransomware - SANS ISC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Powershell Dropping a REvil Ransomware - SANS ISC

Gaming Industry Under Attack: Darknet Threats & Leaked Data

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Gaming Industry Under Attack: Darknet Threats & Leaked Data

Ransomware_in_ICS_Environments_Whitepaper_10_12_20.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware_in_ICS_Environments_Whitepaper_10_12_20.pdf

Secure AI Build Resilience & Accelerate Value with Accenture

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure AI Build Resilience & Accelerate Value with Accenture

Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data | CISA

Microsoft Word - eu-20-Clarke-Its-Not-FINished-The-Evolving-Maturity-In-Ransomware-Operations-wp.docx

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Microsoft Word - eu-20-Clarke-Its-Not-FINished-The-Evolving-Maturity-In-Ransomware-Operations-wp.docx

Report2020CrowdStrikeServicesCyberFrontLines.pdf

file creation date fromORKL

Archived copy on ORKL Detailsfor Report2020CrowdStrikeServicesCyberFrontLines.pdf

Easy Way In? 5 Ransomware Victims Had Their Pulse Secure VPN Credentials Leaked

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Easy Way In? 5 Ransomware Victims Had Their Pulse Secure VPN Credentials Leaked

The Impact of Modern Ransomware on Manufacturing Networks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Impact of Modern Ransomware on Manufacturing Networks

eu-20-Clarke-Its-Not-FINished-The-Evolving-Maturity-In-Ransomware-Operations.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor eu-20-Clarke-Its-Not-FINished-The-Evolving-Maturity-In-Ransomware-Operations.pdf

Zooming into Darknet Threats Targeting Japanese Organizations

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Zooming into Darknet Threats Targeting Japanese Organizations

REvil ransomware hits Managed.com hosting provider, 500K ransom

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware hits Managed.com hosting provider, 500K ransom

REvil ransomware gang claims over $100 million profit in a year

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware gang claims over $100 million profit in a year

Exploit Developer Spotlight: The Story of PlayBit - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exploit Developer Spotlight: The Story of PlayBit - Check Point Research

Die Lage der IT-Sicherheit in Deutschland 2020

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Die Lage der IT-Sicherheit in Deutschland 2020

Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 2

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 2

Double Trouble- Ransomware with Data Leak Extortion, Part 2

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Double Trouble- Ransomware with Data Leak Extortion, Part 2

What's behind the increase in ransomware attacks this year?

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor What's behind the increase in ransomware attacks this year?

Double Trouble- Ransomware with Data Leak Extortion, Part 1

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Double Trouble- Ransomware with Data Leak Extortion, Part 1

Double Trouble- Ransomware with Data Leak Extortion, Part 1

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Double Trouble- Ransomware with Data Leak Extortion, Part 1

KASPERSKY_H1_2020_ICS_REPORT_EN.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor KASPERSKY_H1_2020_ICS_REPORT_EN.pdf

Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 1

How Ransomware Gangs Find New Monetization Schemes and Evolve in Marketing | KELA Cyber

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How Ransomware Gangs Find New Monetization Schemes and Evolve in Marketing | KELA Cyber

Revealing REvil Using DomainTools and Maltego

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Revealing REvil Using DomainTools and Maltego

wp-spark-state-of-ransomware.pdf

file creation date fromORKL

The original link failed its last check. Original publisher Detailsfor wp-spark-state-of-ransomware.pdf

GandCrab ransomware operator arrested in Belarus

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab ransomware operator arrested in Belarus

ESET_Threat_Report_Q22020.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ESET_Threat_Report_Q22020.pdf

Peut-on neutraliser un ransomware lancé sur des milliers de machines en même temps ?

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Peut-on neutraliser un ransomware lancé sur des milliers de machines en même temps ?

Sodinokibi: Ransomware Attackers also Scanning for PoS Software, Leveraging Cobalt Strike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi: Ransomware Attackers also Scanning for PoS Software, Leveraging Cobalt Strike

CERTFR-2020-CTI-006.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-006.pdf

2006-Report-Sodinokibi-EN.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2006-Report-Sodinokibi-EN.pdf

REvil ransomware gang launches auction site to sell stolen data

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor REvil ransomware gang launches auction site to sell stolen data

How Ransomware Adversaries Reacted to the DarkSide Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How Ransomware Adversaries Reacted to the DarkSide Attack

DarkSide Pipeline Attack Shakes Up the Ransomware-as-a-Service Landscape

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor DarkSide Pipeline Attack Shakes Up the Ransomware-as-a-Service Landscape

A former DarkSide listing shows up on REvil's leak site - DataBreaches.Net

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A former DarkSide listing shows up on REvil's leak site - DataBreaches.Net

Sodinokibi / REvil / Maze ransomware (TTPs & IOC)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi / REvil / Maze ransomware (TTPs & IOC)

Changes in REvil ransomware version 2.2

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Changes in REvil ransomware version 2.2

Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk | Microsoft Security Blog

Sodinokibi Ransomware to stop taking Bitcoin to hide money trail

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware to stop taking Bitcoin to hide money trail

Report: Travelex paid hackers $2.3 million worth of Bitcoin after ransomware attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Report: Travelex paid hackers $2.3 million worth of Bitcoin after ransomware attack

Blog: Stay Ahead of Cyber Threats

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blog: Stay Ahead of Cyber Threats

Three More Ransomware Families Create Sites to Leak Stolen Data

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Three More Ransomware Families Create Sites to Leak Stolen Data

Ransomware Threatens to Reveal Company's 'Dirty' Secrets

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Threatens to Reveal Company's 'Dirty' Secrets

Human-operated ransomware attacks: A preventable disaster | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Human-operated ransomware attacks: A preventable disaster | Microsoft Security Blog

Report2020CrowdStrikeGlobalThreatReport

Malpedia library date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Report2020CrowdStrikeGlobalThreatReport

Cyber Threats 2019: A Year in Retrospect

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Threats 2019: A Year in Retrospect

Sodinokibi Ransomware gang threatens to disclose data from Kenneth Cole fashion firm

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware gang threatens to disclose data from Kenneth Cole fashion firm

Sodinokibi Ransomware May Tip NASDAQ on Attacks to Hurt Stock Prices

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware May Tip NASDAQ on Attacks to Hurt Stock Prices

2020_State-of-Malware-Report.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor 2020_State-of-Malware-Report.pdf

Defeating Sodinokibi/REvil String-Obfuscation in Ghidra – nullteilerfrei

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Defeating Sodinokibi/REvil String-Obfuscation in Ghidra – nullteilerfrei

Tracking Down REvil’s “Lalartu” by utilizing multiple OSINT methods

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tracking Down REvil’s “Lalartu” by utilizing multiple OSINT methods

CERTFR-2020-CTI-001.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-001.pdf

Security | KPN Zakelijk

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Security | KPN Zakelijk

Sodinokibi Ransomware Threatens to Publish Data of Automotive Group

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware Threatens to Publish Data of Automotive Group

Behind the scenes of GandCrab’s operation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Behind the scenes of GandCrab’s operation

New Jersey Synagogue Suffers Sodinokibi Ransomware Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Jersey Synagogue Suffers Sodinokibi Ransomware Attack

JSAC2020_1_tamada-yamazaki-nakatsuru_en.pdf

Malpedia library date SecureWorks fromORKLCCS '25 data

Archived copy on ORKL Detailsfor JSAC2020_1_tamada-yamazaki-nakatsuru_en.pdf

Sodinokibi Ransomware Publishes Stolen Data for the First Time

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware Publishes Stolen Data for the First Time

Sodinokibi Ransomware Hits New York Airport Systems

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware Hits New York Airport Systems

CSIS_Threat_Matrix_H1_2019.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CSIS_Threat_Matrix_H1_2019.pdf

Sodinokibi Ransomware Says Travelex Will Pay, One Way or Another

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware Says Travelex Will Pay, One Way or Another

Sodinokibi Ransomware Hits Travelex, Demands $3 Million

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi Ransomware Hits Travelex, Demands $3 Million

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/undressing-the-revil/

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/undressing-the-revil/

Hatching - Automated malware analysis solutions

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hatching - Automated malware analysis solutions

Another Ransomware Will Now Publish Victims' Data If Not Paid

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Another Ransomware Will Now Publish Victims' Data If Not Paid

Ransomware, interrupted: Sodinokibi and the supply chain

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware, interrupted: Sodinokibi and the supply chain

API-Hashing in the Sodinokibi/REvil Ransomware – Why and How? – nullteilerfrei

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor API-Hashing in the Sodinokibi/REvil Ransomware – Why and How? – nullteilerfrei

GandCrab Ransomware-as-a-Service (RaaS) analysed in depth

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab Ransomware-as-a-Service (RaaS) analysed in depth

REvil-Sodinokibi Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor REvil-Sodinokibi Ransomware

REvil- The GandCrab Connection

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor REvil- The GandCrab Connection

A Look Inside the Highly Profitable Sodinokibi Ransomware Business

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Look Inside the Highly Profitable Sodinokibi Ransomware Business

Germanwiper's big brother? gandgrab's kid ? sodinokibi!

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Germanwiper's big brother? gandgrab's kid ? sodinokibi!

Is ‘REvil’ the New GandCrab Ransomware?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Is ‘REvil’ the New GandCrab Ransomware?

Who’s Behind the GandCrab Ransomware?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Who’s Behind the GandCrab Ransomware?

Sodin ransomware exploits Windows vulnerability and processor architecture

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodin ransomware exploits Windows vulnerability and processor architecture

Ransomware REvil - Sodinokibi: Technical analysis and Threat Intelligence Report

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware REvil - Sodinokibi: Technical analysis and Threat Intelligence Report

GandCrab Threat Actors Retire...Maybe

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab Threat Actors Retire...Maybe

Bitdefender Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bitdefender Labs

Malware Tales: Sodinokibi

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware Tales: Sodinokibi

GandCrab ransomware operators put in retirement papers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab ransomware operators put in retirement papers

GandCrab Ransomware Shutting Down After Claiming to Earn $2 Billion

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab Ransomware Shutting Down After Claiming to Earn $2 Billion

2019-data-breach-investigations-report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2019-data-breach-investigations-report.pdf

WG_Threat_Report_EN.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor WG_Threat_Report_EN.pdf

Sodinokibi ransomware exploits WebLogic Server vulnerability

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi ransomware exploits WebLogic Server vulnerability

Fake CDC Flu Pandemic Warning delivers Gandcrab 5.2 ransomware

Malpedia library date fromORKL

The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor Fake CDC Flu Pandemic Warning delivers Gandcrab 5.2 ransomware

Report2019GlobalThreatReport

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Report2019GlobalThreatReport

PINCHY SPIDER Affiliates Adopt “Big Game Hunting” Tactics to Distribute GandCrab Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor PINCHY SPIDER Affiliates Adopt “Big Game Hunting” Tactics to Distribute GandCrab Ransomware

PINCHY SPIDER Adopts “Big Game Hunting” to Distribute GandCrab

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor PINCHY SPIDER Adopts “Big Game Hunting” to Distribute GandCrab

CrowdStrike_GTR_2019.pdf

file creation date fromORKL

The original link failed its last check. Original publisher Detailsfor CrowdStrike_GTR_2019.pdf

Bitdefender Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bitdefender Labs

CrowdStrike_GTR_2019_.pdf

file creation date fromORKL

Archived copy on ORKL Detailsfor CrowdStrike_GTR_2019_.pdf

GandCrab Operators Use Vidar Infostealer as a Forerunner

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab Operators Use Vidar Infostealer as a Forerunner

R.E.: Gandcrab Downloader.. 'There's More To This Than Meets The Eye'

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor R.E.: Gandcrab Downloader.. 'There's More To This Than Meets The Eye'

Pay No More: universal GandCrab decryption tool released for free on No More Ransom

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Pay No More: universal GandCrab decryption tool released for free on No More Ransom

Bitdefender Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bitdefender Labs

Fallout Exploit Kit Used in Malvertising Campaign to Deliver GandCrab Ransomware | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Fallout Exploit Kit Used in Malvertising Campaign to Deliver GandCrab Ransomware | Mandiant

Killswitch File Now Available for GandCrab v4.1.2 Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Killswitch File Now Available for GandCrab v4.1.2 Ransomware

[단독] GandCrab v4.1.2 암호화 차단방법 (Kill-Switch) - Update(v4.1.3) - ASEC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor [단독] GandCrab v4.1.2 암호화 차단방법 (Kill-Switch) - Update(v4.1.3) - ASEC

Gandcrab Ransomware Walks its Way onto Compromised Sites

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Gandcrab Ransomware Walks its Way onto Compromised Sites

Ransomware news: GlobeImposter gets a facelift, GandCrab is still out there

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware news: GlobeImposter gets a facelift, GandCrab is still out there

GandCrab Ransomware Being Distributed Via Malspam Disguised as Receipts

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab Ransomware Being Distributed Via Malspam Disguised as Receipts

GandCrab ransomware distributed by RIG and GrandSoft exploit kits (updated) | Malwarebytes Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab ransomware distributed by RIG and GrandSoft exploit kits (updated) | Malwarebytes Labs

GandCrab Ransomware Distributed by Exploit Kits, Appends GDCB Extension

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GandCrab Ransomware Distributed by Exploit Kits, Appends GDCB Extension