TA2101

Maze (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Maze (Malware Family)

Egregor (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Egregor (Malware Family)

LockBit (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor LockBit (Malware Family)

Yalishanda.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Yalishanda.pdf

m-trends-2025-en.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m-trends-2025-en.pdf

Exposed Credentials & Ransomware Operations: Using LLMs to Digest 200K Messages from the Black Basta Chats

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exposed Credentials & Ransomware Operations: Using LLMs to Digest 200K Messages from the Black Basta Chats

CyberSOC Insights: Analyse einer BlackBasta Angriffskampagne

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CyberSOC Insights: Analyse einer BlackBasta Angriffskampagne

A_Deep_Dive_into_the_Leaked_Black_Basta_Chat_Logs.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A_Deep_Dive_into_the_Leaked_Black_Basta_Chat_Logs.pdf

An in-depth look at Black Basta's TTPs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An in-depth look at Black Basta's TTPs

Anastasia-Inside-BlackBasta.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Anastasia-Inside-BlackBasta.pdf

Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back)

Black Basta’s blunder: exploiting the gang’s leaked chats

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta’s blunder: exploiting the gang’s leaked chats

Inside BRUTED: Black Basta (RaaS) Members Used Automated Brute Forcing Framework to Target Edge Network Devices

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside BRUTED: Black Basta (RaaS) Members Used Automated Brute Forcing Framework to Target Edge Network Devices

Deciphering Black Basta’s Infrastructure from the Chat Leak

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Deciphering Black Basta’s Infrastructure from the Chat Leak

Initial Takeaways from the Black Basta Chat Leaks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Initial Takeaways from the Black Basta Chat Leaks

Black Basta Leak Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Leak Analysis

Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal

/var/log/notes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor /var/log/notes

Ransomware : de REvil à Black Basta, que sait-on de Tramp ?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware : de REvil à Black Basta, que sait-on de Tramp ?

Black Basta exposed: A look at a cybercrime data leak

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta exposed: A look at a cybercrime data leak

Agent AI, Basta Parser Extraordinaire

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Agent AI, Basta Parser Extraordinaire

BlackBasta Leaks: Lessons from the Ascension Health attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackBasta Leaks: Lessons from the Ascension Health attack

Inside BlackBasta: What Leaked Conversations Reveal About Their Ransomware Operations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside BlackBasta: What Leaked Conversations Reveal About Their Ransomware Operations

Ongoing Email Bombing Campaigns leading to Remote Access and Post-Exploitation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing Email Bombing Campaigns leading to Remote Access and Post-Exploitation

Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latrodectus

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latrodectus

ReliaQuest Uncovers New Black Basta Social Engineering Technique

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ReliaQuest Uncovers New Black Basta Social Engineering Technique

Ongoing Social Engineering Campaign Refreshes Payloads

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing Social Engineering Campaign Refreshes Payloads

UNC4393 Goes Gently into the SILENTNIGHT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor UNC4393 Goes Gently into the SILENTNIGHT

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption | Microsoft Security Blog

Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Attackers May Have Used Privilege Escalation Vulnerability as Zero-day

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat actors misusing Quick Assist in social engineering attacks leading to ransomware | Microsoft Security Blog

Stairwell threat report: Black Basta overview and detection rules - Stairwell

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Stairwell threat report: Black Basta overview and detection rules - Stairwell

Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

#StopRansomware: Black Basta | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor #StopRansomware: Black Basta | CISA

Spam trends campaigns senior superlatives 2023

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Spam trends campaigns senior superlatives 2023

Zeus, IcedID malware gangs leader pleads guilty, faces 40 years in prison

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Zeus, IcedID malware gangs leader pleads guilty, faces 40 years in prison

Foreign National Pleads Guilty to Role in Cybercrime Schemes Involving Tens of Millions of Dollars in Losses

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Foreign National Pleads Guilty to Role in Cybercrime Schemes Involving Tens of Millions of Dollars in Losses

Security Copilot Promptbook: Threat Actor Profile

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Security Copilot Promptbook: Threat Actor Profile

IcedID - FIRST AMS 2023

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor IcedID - FIRST AMS 2023

March 2023 broke ransomware attack records with 459 incidents

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor March 2023 broke ransomware attack records with 459 incidents

1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

PwC Cyber Threats 2022: A Year in Retrospect.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor PwC Cyber Threats 2022: A Year in Retrospect.pdf

QBot: Laying the Foundations for Black Basta Ransomware Activity

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor QBot: Laying the Foundations for Black Basta Ransomware Activity

Following the Scent of TrickGate: 6-Year-Old Packer Used to Deploy the Most Wanted Malware - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Following the Scent of TrickGate: 6-Year-Old Packer Used to Deploy the Most Wanted Malware - Check Point Research

Black Basta - Technical Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta - Technical Analysis

Ransomware Diaries: Volume 1 | Analyst1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Diaries: Volume 1 | Analyst1

Back in Black... Basta | Zscaler

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Back in Black... Basta | Zscaler

THREAT ALERT: Aggressive Qakbot Campaign and the Black Basta Ransomware Group Targeting U.S. Companies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor THREAT ALERT: Aggressive Qakbot Campaign and the Black Basta Ransomware Group Targeting U.S. Companies

Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor

Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike

Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

Ransomware Spotlight: Black Basta

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Spotlight: Black Basta

Threat Assessment: Black Basta Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Assessment: Black Basta Ransomware

Luna and Black Basta — new ransomware for Windows, Linux and ESXi

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Luna and Black Basta — new ransomware for Windows, Linux and ESXi

Black Basta Ransomware Operators Expand Their Attack Arsenal With QakBot Trojan and PrintNightmare Exploit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Operators Expand Their Attack Arsenal With QakBot Trojan and PrintNightmare Exploit

Black Basta Ransomware Emerging From Underground to Attack Corporate Networks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Emerging From Underground to Attack Corporate Networks

Cyber Security Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Security Research

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Examining the Black Basta Ransomware’s Infection Routine

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Examining the Black Basta Ransomware’s Infection Routine

Cybercrime loves company: Conti cooperated with other ransomware gangs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybercrime loves company: Conti cooperated with other ransomware gangs

German wind farm operator confirms cybersecurity incident

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor German wind farm operator confirms cybersecurity incident

New Black Basta ransomware springs into action with a dozen breaches

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New Black Basta ransomware springs into action with a dozen breaches

American Dental Association hit by new Black Basta ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor American Dental Association hit by new Black Basta ransomware

Gone in 52 Seconds…and 42 Minutes: A Comparative Analysis of Ransomware Encryption Speed | Splunk

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Gone in 52 Seconds…and 42 Minutes: A Comparative Analysis of Ransomware Encryption Speed | Splunk

An Empirically Comparative Analysis of Ransomware Binaries

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor An Empirically Comparative Analysis of Ransomware Binaries

Ransomware dev releases Egregor, Maze master decryption keys

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware dev releases Egregor, Maze master decryption keys

Master decryption keys for Maze, Egregor, and Sekhmet ransomware leaked

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Master decryption keys for Maze, Egregor, and Sekhmet ransomware leaked

FINDING BEACONS IN THE DARK 1650728751599

Malpedia library date BlackBerry fromORKLCCS '25 data

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor FINDING BEACONS IN THE DARK 1650728751599

The Ransomware Threat (White Paper)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Ransomware Threat (White Paper)

Crytek confirms Egregor ransomware attack, customer data theft

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Crytek confirms Egregor ransomware attack, customer data theft

Ransomware Gangs and the Name Game Distraction

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Gangs and the Name Game Distraction

Ransomwhere project wants to create a database of past ransomware payments

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomwhere project wants to create a database of past ransomware payments

Most Prolific Ransomware Families for Defenders

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Most Prolific Ransomware Families for Defenders

Ransomware Actors Evolved Their Operations in 2020

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware Actors Evolved Their Operations in 2020

How Initial Access Brokers Lead to Ransomware | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How Initial Access Brokers Lead to Ransomware | Proofpoint US

Darkside gang estimated to have made over $90 million from ransomware attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Darkside gang estimated to have made over $90 million from ransomware attacks

DarkSide ransomware made $90 million in just nine months

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DarkSide ransomware made $90 million in just nine months

Data leak marketplaces aim to take over the extortion economy

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Data leak marketplaces aim to take over the extortion economy

CTIR_casestudy_1.pdf

file creation date fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor CTIR_casestudy_1.pdf

Intel 471

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Intel 471

Ransomware Preparedness: A Call To Action | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Preparedness: A Call To Action | CrowdStrike

Ransom Mafia - Analysis of the World's First Ransomware Cartel

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransom Mafia - Analysis of the World's First Ransomware Cartel

RANSOM-MAFIA-ANALYSIS-OF-THE-WORLD%E2%80%99S-FIRST-RANSOMWARE-CARTEL.pdf

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RANSOM-MAFIA-ANALYSIS-OF-THE-WORLD%E2%80%99S-FIRST-RANSOMWARE-CARTEL.pdf

unit42-ransomware-threat-report-2021.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor unit42-ransomware-threat-report-2021.pdf

CERTFR-2021-CTI-007.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2021-CTI-007.pdf

Cyber Threats 2020: A Year in Retrospect

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Threats 2020: A Year in Retrospect

So Unchill: Melting UNC2198 ICEDID to Ransomware Operations | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor So Unchill: Melting UNC2198 ICEDID to Ransomware Operations | Mandiant

So Unchill Melting UNC2198 ICEDID to Ransomware Operations

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor So Unchill Melting UNC2198 ICEDID to Ransomware Operations

So Unchill: Melting UNC2198 ICEDID to Ransomware Operations | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor So Unchill: Melting UNC2198 ICEDID to Ransomware Operations | Mandiant

Report2021GTR.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Report2021GTR.pdf

The_CrowdStrike_2021_Global_Threat_Report

file creation date fromORKL

The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The_CrowdStrike_2021_Global_Threat_Report

CTI-League-Darknet-Report-2021.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CTI-League-Darknet-Report-2021.pdf

Blockchain Analysis Shows Connections Between Four of 2020’s Biggest Ransomware Strains

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blockchain Analysis Shows Connections Between Four of 2020’s Biggest Ransomware Strains

Secure AI Build Resilience & Accelerate Value with Accenture

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure AI Build Resilience & Accelerate Value with Accenture

Applying the Diamond Model to Cognizant (MSP) vs. Maze Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Applying the Diamond Model to Cognizant (MSP) vs. Maze Ransomware

CERTFR-2020-CTI-012.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-012.pdf

Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data | CISA

Quarterly Report: Incident Response trends from Fall 2020

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Quarterly Report: Incident Response trends from Fall 2020

Report2020CrowdStrikeServicesCyberFrontLines.pdf

file creation date fromORKL

Archived copy on ORKL Detailsfor Report2020CrowdStrikeServicesCyberFrontLines.pdf

IcedID Stealer Man-in-the-browser Banking Trojan

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor IcedID Stealer Man-in-the-browser Banking Trojan

The Impact of Modern Ransomware on Manufacturing Networks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Impact of Modern Ransomware on Manufacturing Networks

Zooming into Darknet Threats Targeting Japanese Organizations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Zooming into Darknet Threats Targeting Japanese Organizations

Targeted ransomware: it’s not just about encrypting your data!

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Targeted ransomware: it’s not just about encrypting your data!

Maze ransomware is shutting down its cybercrime operation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Maze ransomware is shutting down its cybercrime operation

Bitdefender-Whitepaper-WMI-creat4871-en-EN-GenericUse.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Bitdefender-Whitepaper-WMI-creat4871-en-EN-GenericUse.pdf

Exploit Developer Spotlight: The Story of PlayBit - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exploit Developer Spotlight: The Story of PlayBit - Check Point Research

Life of Maze ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Life of Maze ransomware

Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 2

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 2

Double Trouble- Ransomware with Data Leak Extortion, Part 2

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Double Trouble- Ransomware with Data Leak Extortion, Part 2

Double Trouble- Ransomware with Data Leak Extortion, Part 1

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Double Trouble- Ransomware with Data Leak Extortion, Part 1

Baltimore ransomware attack was early attempt at data extortion, new report shows

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Baltimore ransomware attack was early attempt at data extortion, new report shows

Double Trouble- Ransomware with Data Leak Extortion, Part 1

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Double Trouble- Ransomware with Data Leak Extortion, Part 1

Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 1

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware + Data Leak Extortion: Origins and Adversaries, Pt. 1

Egregor

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Egregor

Egregor Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Egregor Ransomware

Maze ransomware now encrypts via virtual machines to evade detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Maze ransomware now encrypts via virtual machines to evade detection

Quarterly Report: Incident Response trends in Summer 2020

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Quarterly Report: Incident Response trends in Summer 2020

How Ransomware Gangs Find New Monetization Schemes and Evolve in Marketing | KELA Cyber

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How Ransomware Gangs Find New Monetization Schemes and Evolve in Marketing | KELA Cyber

Case Study: Catching a Human-Operated Maze Ransomware Attack In Action - SentinelLabs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Case Study: Catching a Human-Operated Maze Ransomware Attack In Action - SentinelLabs

wp-spark-state-of-ransomware.pdf

file creation date fromORKL

The original link failed its last check. Original publisher Detailsfor wp-spark-state-of-ransomware.pdf

Ransomware gang publishes tens of GBs of internal data from LG and Xerox

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware gang publishes tens of GBs of internal data from LG and Xerox

ESET_Threat_Report_Q22020.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ESET_Threat_Report_Q22020.pdf

Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW) - SentinelLabs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Enter the Maze: Demystifying an Affiliate Involved in Maze (SNOW) - SentinelLabs

Financially Motivated Actors Are Expanding Access Into OT: Analysis of Kill Lists That Include OT Processes Used With Seven Malware Families | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Financially Motivated Actors Are Expanding Access Into OT: Analysis of Kill Lists That Include OT Processes Used With Seven Malware Families | Mandiant

Maze ransomware continues to be a threat to the consumers - Home

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Maze ransomware continues to be a threat to the consumers - Home

Microsoft Word - Letter 4_v3_NEW.doc

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Microsoft Word - Letter 4_v3_NEW.doc

Chipmaker MaxLinear reports data breach after Maze Ransomware attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Chipmaker MaxLinear reports data breach after Maze Ransomware attack

Talks - BrightTALK

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Talks - BrightTALK

Sodinokibi / REvil / Maze ransomware (TTPs & IOC)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sodinokibi / REvil / Maze ransomware (TTPs & IOC)

Navigating the MAZE: Tactics, Techniques and Procedures Associated With MAZE Ransomware Incidents

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Navigating the MAZE: Tactics, Techniques and Procedures Associated With MAZE Ransomware Incidents

How to Deobfuscate Maze Ransomware | CrowdStrike

Malpedia library date fromORKL

The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor How to Deobfuscate Maze Ransomware | CrowdStrike

Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware groups continue to target healthcare, critical services; here’s how to reduce risk | Microsoft Security Blog

IT services giant Cognizant suffers Maze Ransomware cyber attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor IT services giant Cognizant suffers Maze Ransomware cyber attack

Cyber insurer Chubb had data stolen in Maze ransomware attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber insurer Chubb had data stolen in Maze ransomware attack

Macintosh HD:Users:Shared:dd:4work:Bitdefender-TRR-Whitepaper-Maze-creat4351-en_EN:Bitdefender-TRR-Whitepaper-Maze-creat4351-en_EN.indd

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Macintosh HD:Users:Shared:dd:4work:Bitdefender-TRR-Whitepaper-Maze-creat4351-en_EN:Bitdefender-TRR-Whitepaper-Maze-creat4351-en_EN.indd

Three More Ransomware Families Create Sites to Leak Stolen Data

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Three More Ransomware Families Create Sites to Leak Stolen Data

Sekhmet

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sekhmet

Sekhmet Ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Sekhmet Ransomware

Ransomware Attackers Use Your Cloud Backups Against You

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Attackers Use Your Cloud Backups Against You

Cyber attaque à l’encontre des serveurs de Bouygues Construction

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber attaque à l’encontre des serveurs de Bouygues Construction

CERTFR-2020-CTI-001.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2020-CTI-001.pdf

Maze Ransomware Releases Files Stolen from City of Pensacola

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Maze Ransomware Releases Files Stolen from City of Pensacola

malware-notes/Ransomware/Maze.md at master · albertzsigovits/malware-notes

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor malware-notes/Ransomware/Maze.md at master · albertzsigovits/malware-notes

Incident Response lessons from recent Maze ransomware attacks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Incident Response lessons from recent Maze ransomware attacks

Ransomware Gangs Now Outing Victim Businesses That Don’t Pay Up

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Gangs Now Outing Victim Businesses That Don’t Pay Up

Maze Ransomware Behind Pensacola Cyberattack, $1M Ransom Demand

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Maze Ransomware Behind Pensacola Cyberattack, $1M Ransom Demand

New version of IcedID Trojan uses steganographic payloads

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor New version of IcedID Trojan uses steganographic payloads

Allied Universal Breached by Maze Ransomware, Stolen Data Leaked

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Allied Universal Breached by Maze Ransomware, Stolen Data Leaked

Allied Universal Breached by Maze Ransomware, Stolen Data Leaked

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Allied Universal Breached by Maze Ransomware, Stolen Data Leaked

TA2101 Plays Government Imposter to Distribute Malware | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TA2101 Plays Government Imposter to Distribute Malware | Proofpoint US

TA2101 plays government imposter to distribute malware to German, Italian, and US organizations

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TA2101 plays government imposter to distribute malware to German, Italian, and US organizations

Шифровальщики-вымогатели The Digest "Crypto-Ransomware"

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Шифровальщики-вымогатели The Digest "Crypto-Ransomware"

Maze Ransomware Now Delivered by Spelevo Exploit Kit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Maze Ransomware Now Delivered by Spelevo Exploit Kit

Maze, ChaCha

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Maze, ChaCha