Velvet Tempest

Bandai Namco confirms hack after ALPHV ransomware data leak threat

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Bandai Namco confirms hack after ALPHV ransomware data leak threat

ALPHV ransomware adds data leak API in new extortion strategy

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor ALPHV ransomware adds data leak API in new extortion strategy

The many lives of BlackCat ransomware | Microsoft Security Blog

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor The many lives of BlackCat ransomware | Microsoft Security Blog

LaZagne (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor LaZagne (Malware Family)

ALPHV, BlackCat Gang - Threat Group Cards: A Threat Actor Encyclopedia

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor ALPHV, BlackCat Gang - Threat Group Cards: A Threat Actor Encyclopedia

Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

US offers up to $15 million for tips on ALPHV ransomware gang

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor US offers up to $15 million for tips on ALPHV ransomware gang

FBI: ALPHV ransomware raked in $300 million from over 1,000 victims

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor FBI: ALPHV ransomware raked in $300 million from over 1,000 victims

Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware

When the Defenders Become the Attackers: Cybersecurity Experts Indicted for BlackCat Ransomware Operations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor When the Defenders Become the Attackers: Cybersecurity Experts Indicted for BlackCat Ransomware Operations

TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

Malpedia library date Julien DUGAY fromORKL

Archived copy on ORKL Detailsfor TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines

Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latrodectus

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latrodectus

Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware

How to detect the modular RAT CSHARP-STREAMER

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How to detect the modular RAT CSHARP-STREAMER

IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment

Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting

Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit

m-trends-2024.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m-trends-2024.pdf

The Anatomy of an ALPHA SPIDER Ransomware Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Anatomy of an ALPHA SPIDER Ransomware Attack

Scattered Spider laying new eggs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Scattered Spider laying new eggs

Malware in the wild book.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware in the wild book.

BlackCat plays with malvertising traps to lure corporate victims

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat plays with malvertising traps to lure corporate victims

Scattered Spider | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Scattered Spider | CISA

Nitrogen Campaign 2.0: Reloads with Enhanced Capabilities Leading to ALPHV/BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Nitrogen Campaign 2.0: Reloads with Enhanced Capabilities Leading to ALPHV/BlackCat Ransomware

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog

CERTFR-2023-CTI-007.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2023-CTI-007.pdf

FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware

Malware analysis report: BlackCat ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware analysis report: BlackCat ransomware

BlackCat Ransomware Deploys New Signed Kernel Driver

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware Deploys New Signed Kernel Driver

Hypervisor Jackpotting, Part 3: Lack of Antivirus Support Opens the Door to Adversaries

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hypervisor Jackpotting, Part 3: Lack of Antivirus Support Opens the Door to Adversaries

March 2023 broke ransomware attack records with 459 incidents

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor March 2023 broke ransomware attack records with 459 incidents

ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access

ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access | Mandiant

1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

BlackCat Ransomware: Tactics and Techniques From a Targeted Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware: Tactics and Techniques From a Targeted Attack

BlackCat Ransomware- Tactics and Techniques From a Targeted Attack

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor BlackCat Ransomware- Tactics and Techniques From a Targeted Attack

DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector | Microsoft Security Blog

Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics

ALPHV/BlackCat ransomware family becoming more dangerous

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV/BlackCat ransomware family becoming more dangerous

Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

TTPs Associated With a New Version of the BlackCat Ransomware - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TTPs Associated With a New Version of the BlackCat Ransomware - SecurityScorecard

The Increase in Ransomware Attacks on Local Governments - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Increase in Ransomware Attacks on Local Governments - SecurityScorecard

A Deep Dive Into ALPHV/BlackCat Ransomware - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Deep Dive Into ALPHV/BlackCat Ransomware - SecurityScorecard

BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies

Common-TTPs-of-the-modern-ransomware_low-res.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Common-TTPs-of-the-modern-ransomware_low-res.pdf

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

The many lives of BlackCat ransomware | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The many lives of BlackCat ransomware | Microsoft Security Blog

The many lives of BlackCat ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The many lives of BlackCat ransomware

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Ransomware-as-a-service- Understanding the cybercrime gig economy and how to protect yourself

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware-as-a-service- Understanding the cybercrime gig economy and how to protect yourself

German wind farm operator confirms cybersecurity incident

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor German wind farm operator confirms cybersecurity incident

20220427_NP_TLPWHITE_ANSSI_FIN7.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 20220427_NP_TLPWHITE_ANSSI_FIN7.pdf

Microsoft Word - Blackcat_FLASH_FINAL 04192022

Malpedia library date GESYEII fromORKL

The original link failed its last check. Original publisher Detailsfor Microsoft Word - Blackcat_FLASH_FINAL 04192022

An Investigation of the BlackCat Ransomware via Trend Micro Vision One

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An Investigation of the BlackCat Ransomware via Trend Micro Vision One

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

A Bad Luck BlackCat

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Bad Luck BlackCat

TR_BlackCat_Report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TR_BlackCat_Report.pdf

Falcon OverWatch Contributes to BlackCat Protection | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Falcon OverWatch Contributes to BlackCat Protection | CrowdStrike

From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

The Ransomware Threat Landscape: What to Expect in 2022

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor The Ransomware Threat Landscape: What to Expect in 2022

Cybereason vs. BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybereason vs. BlackCat Ransomware

BlackCat ransomware implicated in attack on German oil companies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat ransomware implicated in attack on German oil companies

Who Wrote the ALPHV/BlackCat Ransomware Strain?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Who Wrote the ALPHV/BlackCat Ransomware Strain?

Threat Assessment: BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Assessment: BlackCat Ransomware

ALPHV ransomware gang analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV ransomware gang analysis

ALPHV ransomware gang analysis

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor ALPHV ransomware gang analysis

BlackCat Ransomware (ALPHV)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware (ALPHV)

BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

Noberus: Technical Analysis Shows Sophistication of New Rust-based Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Noberus: Technical Analysis Shows Sophistication of New Rust-based Ransomware

BlackCat : New Rust based ransomware borrowing BlackMatter’s configuration

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat : New Rust based ransomware borrowing BlackMatter’s configuration

GitHub - f0wl/blackCatConf: Configuration Extractor for BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GitHub - f0wl/blackCatConf: Configuration Extractor for BlackCat Ransomware

BlackCat Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor BlackCat Ransomware

BlackCat, ALPHV

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat, ALPHV