Vanilla Tempest

FiveHands (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor FiveHands (Malware Family)

ClickFix w akcji: jak fake captcha może zaszyfrować całą firmę

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ClickFix w akcji: jak fake captcha może zaszyfrować całą firmę

Planned failure: Gootloader's malformed ZIP actually works perfectly

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Planned failure: Gootloader's malformed ZIP actually works perfectly

Unpacking the packer ‘pkr_mtsi’

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unpacking the packer ‘pkr_mtsi’

Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware

Gootloader | Threat Detection Overview | Huntress

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Gootloader | Threat Detection Overview | Huntress

When the Defenders Become the Attackers: Cybersecurity Experts Indicted for BlackCat Ransomware Operations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor When the Defenders Become the Attackers: Cybersecurity Experts Indicted for BlackCat Ransomware Operations

Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates

Rhysida: Evading Detection, One Service at a Time

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Rhysida: Evading Detection, One Service at a Time

TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

Malpedia library date Julien DUGAY fromORKL

Archived copy on ORKL Detailsfor TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

BlackSuit ransomware extortion sites seized in Operation Checkmate

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackSuit ransomware extortion sites seized in Operation Checkmate

c-b.io | RE // DFIR // CTF

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor c-b.io | RE // DFIR // CTF

Greedy Sponge Targets Mexico with AllaKore RAT and SystemBC - Arctic Wolf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Greedy Sponge Targets Mexico with AllaKore RAT and SystemBC - Arctic Wolf

c-b.io | RE // DFIR // CTF

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor c-b.io | RE // DFIR // CTF

Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines

m-trends-2025-en.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m-trends-2025-en.pdf

Interlock ransomware evolving under the radar

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Interlock ransomware evolving under the radar

Hunting Mice In Tunnels II - Fake CAPTCHAs and Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hunting Mice In Tunnels II - Fake CAPTCHAs and Ransomware

VirusTotal - File - 48157c03bf9731926f9567fe1fabc807bff166241f8d6c27e6308dde68112669

Malpedia library date fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor VirusTotal - File - 48157c03bf9731926f9567fe1fabc807bff166241f8d6c27e6308dde68112669

c-b.io | RE // DFIR // CTF

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor c-b.io | RE // DFIR // CTF

c-b.io | RE // DFIR // CTF

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor c-b.io | RE // DFIR // CTF

TAG-124’s Multi-Layered TDS Infrastructure and Extensive User Base

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TAG-124’s Multi-Layered TDS Infrastructure and Extensive User Base

Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware

Oyster’s Trail: Resurgence of Infrastructure Linked to Ransomware and Cybercrime Actors

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Oyster’s Trail: Resurgence of Infrastructure Linked to Ransomware and Cybercrime Actors

Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

Ransomware Roundup - Interlock | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Roundup - Interlock | FortiGuard Labs

Untitled

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor Untitled

Unwrapping the emerging Interlock ransomware attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unwrapping the emerging Interlock ransomware attack

Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latrodectus

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latrodectus

Lynx Ransomware: A Rebranding of INC Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Lynx Ransomware: A Rebranding of INC Ransomware

Outmaneuvering Rhysida: How Advanced Threat Intelligence Shields Critical Infrastructure from Ransomware

Malpedia library date Insikt Group® by Recorded Future® fromORKL

Archived copy on ORKL Detailsfor Outmaneuvering Rhysida: How Advanced Threat Intelligence Shields Critical Infrastructure from Ransomware

Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware

Cybersecurity News: INC targets healthcare, Providence schools cyberattack, Apple iPads bricked

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybersecurity News: INC targets healthcare, Providence schools cyberattack, Apple iPads bricked

BlackSuit Ransomware

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor BlackSuit Ransomware

Ongoing Social Engineering Campaign Refreshes Payloads

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ongoing Social Engineering Campaign Refreshes Payloads

UNC4393 Goes Gently into the SILENTNIGHT

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor UNC4393 Goes Gently into the SILENTNIGHT

Rhysida using Oyster Backdoor to deliver ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Rhysida using Oyster Backdoor to deliver ransomware

Exposing FakeBat loader: distribution methods and adversary infrastructure

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exposing FakeBat loader: distribution methods and adversary infrastructure

IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment

Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting

Largest ever operation against botnets hits dropper malware ecosystem

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Largest ever operation against botnets hits dropper malware ecosystem

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat actors misusing Quick Assist in social engineering attacks leading to ransomware | Microsoft Security Blog

From IcedID to Dagon Locker Ransomware in 29 Days

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor From IcedID to Dagon Locker Ransomware in 29 Days

Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit

The Anatomy of an ALPHA SPIDER Ransomware Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Anatomy of an ALPHA SPIDER Ransomware Attack

Unveiling UAC-0184: The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Unveiling UAC-0184: The Steganography Saga of the IDAT Loader Delivering Remcos RAT to a Ukraine Entity in Finland

Scattered Spider laying new eggs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Scattered Spider laying new eggs

Decryptor for Rhysida ransomware is available! - Help Net Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Decryptor for Rhysida ransomware is available! - Help Net Security

Inside the SYSTEMBC Command-and-Control Server

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside the SYSTEMBC Command-and-Control Server

INC Linux Ransomware - Sandboxing with ELFEN and Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor INC Linux Ransomware - Sandboxing with ELFEN and Analysis

Malware in the wild book.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware in the wild book.

Rhysida Ransomware: History, TTPs and Adversary Emulation Plans

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Rhysida Ransomware: History, TTPs and Adversary Emulation Plans

Rhysida Ransomware and the Detection Opportunities

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Rhysida Ransomware and the Detection Opportunities

Scattered Spider

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Scattered Spider

BlackCat plays with malvertising traps to lure corporate victims

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat plays with malvertising traps to lure corporate victims

Scattered Spider | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Scattered Spider | CISA

Investigating the New Rhysida Ransomware | FortiGuard Labs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Investigating the New Rhysida Ransomware | FortiGuard Labs

Nitrogen Campaign 2.0: Reloads with Enhanced Capabilities Leading to ALPHV/BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Nitrogen Campaign 2.0: Reloads with Enhanced Capabilities Leading to ALPHV/BlackCat Ransomware

Rhysida Ransomware Technical Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Rhysida Ransomware Technical Analysis

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog

Sekoia.io mid-2023 Ransomware Threat Landscape

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Sekoia.io mid-2023 Ransomware Threat Landscape

FIRSTCON23-TLPCLEAR-Sood-Compromising-the-Keys-to-the-Kingdom.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FIRSTCON23-TLPCLEAR-Sood-Compromising-the-Keys-to-the-Kingdom.pdf

CERTFR-2023-CTI-007.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2023-CTI-007.pdf

Focus on DroxiDat/SystemBC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Focus on DroxiDat/SystemBC

An Overview of the New Rhysida Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An Overview of the New Rhysida Ransomware

Rhysida ransomware behind recent attacks on healthcare

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Rhysida ransomware behind recent attacks on healthcare

The Rhysida Ransomware: Activity Analysis and Ties to Vice Society - Check Point Research

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Rhysida Ransomware: Activity Analysis and Ties to Vice Society - Check Point Research

What Cisco Talos knows about the Rhysida ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor What Cisco Talos knows about the Rhysida ransomware

Final-CRWD-2023-Threat-Hunting-Report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Final-CRWD-2023-Threat-Hunting-Report.pdf

FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware

Malware analysis report: BlackCat ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware analysis report: BlackCat ransomware

Rhysida Ransomware | RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Rhysida Ransomware | RaaS Crawls Out of Crimeware Undergrowth to Attack Chilean Army

8Base Ransomware: A Heavy Hitting Player

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 8Base Ransomware: A Heavy Hitting Player

Goot to Loot—How a Gootloader Infection Led to Credential Access

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Goot to Loot—How a Gootloader Infection Led to Credential Access

BlackCat Ransomware Deploys New Signed Kernel Driver

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware Deploys New Signed Kernel Driver

Hypervisor Jackpotting, Part 3: Lack of Antivirus Support Opens the Door to Adversaries

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hypervisor Jackpotting, Part 3: Lack of Antivirus Support Opens the Door to Adversaries

Play Ransomware Group Using New Custom Data-Gathering Tools

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Play Ransomware Group Using New Custom Data-Gathering Tools

March 2023 broke ransomware attack records with 459 incidents

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor March 2023 broke ransomware attack records with 459 incidents

ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access | Mandiant

Malicious ISO File Leads to Domain Wide Ransomware

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor Malicious ISO File Leads to Domain Wide Ransomware

1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

eSentire Threat Intelligence Malware Analysis: BatLoader

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor eSentire Threat Intelligence Malware Analysis: BatLoader

Vice-Society spreads its own ransomware

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Vice-Society spreads its own ransomware

Vice Society spreads its own ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Vice Society spreads its own ransomware

Defeating VMProtect's Latest Tricks | cyber.wtf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Defeating VMProtect's Latest Tricks | cyber.wtf

Black Basta - Technical Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Black Basta - Technical Analysis

Custom-Branded Ransomware- The Vice Society Group and the Threat of Outsourced Development

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Custom-Branded Ransomware- The Vice Society Group and the Threat of Outsourced Development

Custom-Branded Ransomware: The Vice Society Group and the Threat of Outsourced Development

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Custom-Branded Ransomware: The Vice Society Group and the Threat of Outsourced Development

Emotet Strikes Again - LNK File Leads to Domain Wide Ransomware

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor Emotet Strikes Again - LNK File Leads to Domain Wide Ransomware

How LNK Files Are Abused by Threat Actors

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How LNK Files Are Abused by Threat Actors

BlackCat Ransomware: Tactics and Techniques From a Targeted Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware: Tactics and Techniques From a Targeted Attack

Windows.Carving.SystemBC :: Velociraptor - Digging deeper!

Malpedia library date Velociraptor fromORKLCCS '25 data

Archived copy on ORKL Detailsfor Windows.Carving.SystemBC :: Velociraptor - Digging deeper!

DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector

DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector | Microsoft Security Blog

3rd October – Threat Intelligence Report

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 3rd October – Threat Intelligence Report

ESXi-Targeting Ransomware: The Threats That Are After Your Virtual Machines (Part 1)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ESXi-Targeting Ransomware: The Threats That Are After Your Virtual Machines (Part 1)

Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics

ALPHV-BlackCat ransomware family becoming more dangerous

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor ALPHV-BlackCat ransomware family becoming more dangerous

ALPHV/BlackCat ransomware family becoming more dangerous

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV/BlackCat ransomware family becoming more dangerous

SystemBC: The Multipurpose Proxy Bot Still Breathes

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SystemBC: The Multipurpose Proxy Bot Still Breathes

Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

#StopRansomware: Vice Society | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor #StopRansomware: Vice Society | CISA

TTPs Associated With a New Version of the BlackCat Ransomware - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TTPs Associated With a New Version of the BlackCat Ransomware - SecurityScorecard

Brute Force Attempts May Have Preceded Ransomware Attack on School District

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Brute Force Attempts May Have Preceded Ransomware Attack on School District

The Increase in Ransomware Attacks on Local Governments - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Increase in Ransomware Attacks on Local Governments - SecurityScorecard

#StopRansomware: Zeppelin Ransomware | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor #StopRansomware: Zeppelin Ransomware | CISA

AA22-223A_Zeppelin_CSA.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AA22-223A_Zeppelin_CSA.pdf

A Deep Dive Into ALPHV/BlackCat Ransomware - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Deep Dive Into ALPHV/BlackCat Ransomware - SecurityScorecard

Vice Society- a discreet but steady double extortion ransomware group

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Vice Society- a discreet but steady double extortion ransomware group

Vice Society: a discreet but steady double extortion ransomware group

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Vice Society: a discreet but steady double extortion ransomware group

BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies

Common-TTPs-of-the-modern-ransomware_low-res.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Common-TTPs-of-the-modern-ransomware_low-res.pdf

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

The many lives of BlackCat ransomware | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The many lives of BlackCat ransomware | Microsoft Security Blog

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

CUBA Ransomware Campaign Analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CUBA Ransomware Campaign Analysis

Emotet Botnet Rises Again | Bitsight

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Emotet Botnet Rises Again | Bitsight

LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

ITG23 crypters cooperation between cybercriminal groups

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor ITG23 crypters cooperation between cybercriminal groups

New ransomware trends in 2022

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor New ransomware trends in 2022

Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Cybereason vs. Quantum Locker Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybereason vs. Quantum Locker Ransomware

German wind farm operator confirms cybersecurity incident

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor German wind farm operator confirms cybersecurity incident

20220427_NP_TLPWHITE_ANSSI_FIN7.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 20220427_NP_TLPWHITE_ANSSI_FIN7.pdf

Microsoft Word - Blackcat_FLASH_FINAL 04192022

Malpedia library date GESYEII fromORKL

The original link failed its last check. Original publisher Detailsfor Microsoft Word - Blackcat_FLASH_FINAL 04192022

An Investigation of the BlackCat Ransomware via Trend Micro Vision One

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An Investigation of the BlackCat Ransomware via Trend Micro Vision One

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

SystemBC Being Used by Various Attackers

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SystemBC Being Used by Various Attackers

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

A Bad Luck BlackCat

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Bad Luck BlackCat

TR_BlackCat_Report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TR_BlackCat_Report.pdf

Hive ransomware ports its Linux VMware ESXi encryptor to Rust

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Hive ransomware ports its Linux VMware ESXi encryptor to Rust

Ransomware Threat Report 2022

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware Threat Report 2022

Falcon OverWatch Contributes to BlackCat Protection | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Falcon OverWatch Contributes to BlackCat Protection | CrowdStrike

2022_ThreatDetectionReport_RedCanary.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2022_ThreatDetectionReport_RedCanary.pdf

This is a BlackCat you don't want crossing your path

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor This is a BlackCat you don't want crossing your path

From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

The Ransomware Threat Landscape: What to Expect in 2022

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor The Ransomware Threat Landscape: What to Expect in 2022

SystemBC, PowerShell version

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SystemBC, PowerShell version

Cybereason vs. BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybereason vs. BlackCat Ransomware

Ransomware Profile: ALPHV

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Profile: ALPHV

VMware Exposing Malware In Linux Based Multi Cloud Environments

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor VMware Exposing Malware In Linux Based Multi Cloud Environments

BlackCat ransomware implicated in attack on German oil companies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat ransomware implicated in attack on German oil companies

Who Wrote the ALPHV/BlackCat Ransomware Strain?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Who Wrote the ALPHV/BlackCat Ransomware Strain?

Threat Assessment: BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Assessment: BlackCat Ransomware

ALPHV ransomware gang analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV ransomware gang analysis

BlackCat Ransomware (ALPHV)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware (ALPHV)

One Source to Rule Them All: Chasing AVADDON Ransomware | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor One Source to Rule Them All: Chasing AVADDON Ransomware | Mandiant

BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

Vice Society: Ransomware Gang Disrupted Spar Stores

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Vice Society: Ransomware Gang Disrupted Spar Stores

Vice Society- Ransomware Gang Disrupted Spar Stores

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Vice Society- Ransomware Gang Disrupted Spar Stores

Noberus: Technical Analysis Shows Sophistication of New Rust-based Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Noberus: Technical Analysis Shows Sophistication of New Rust-based Ransomware

BlackCat : New Rust based ransomware borrowing BlackMatter’s configuration

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat : New Rust based ransomware borrowing BlackMatter’s configuration

GitHub - f0wl/blackCatConf: Configuration Extractor for BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GitHub - f0wl/blackCatConf: Configuration Extractor for BlackCat Ransomware

BlackCat, ALPHV

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat, ALPHV

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

IcedID to XingLocker Ransomware in 24 hours

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor IcedID to XingLocker Ransomware in 24 hours

Ransomware Operators Found Using New Franchise Business Model

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Operators Found Using New Franchise Business Model

Vice Society Leverages PrintNightmare In Ransomware Attacks

date in the title fromORKL

The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Vice Society Leverages PrintNightmare In Ransomware Attacks

How PROPHET SPIDER Exploits Oracle WebLogic | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How PROPHET SPIDER Exploits Oracle WebLogic | CrowdStrike

[QuickNote] MountLocker – Some pseudo-code snippets

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor [QuickNote] MountLocker – Some pseudo-code snippets

How cybercriminals create turbulence for the transportation industry

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How cybercriminals create turbulence for the transportation industry

Ransomware: Growing Number of Attackers Using Virtual Machines

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware: Growing Number of Attackers Using Virtual Machines

Inside the SystemBC Malware-As-A-Service

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside the SystemBC Malware-As-A-Service

MountLocker Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor MountLocker Ransomware

Look how many cybercriminals love Cobalt Strike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Look how many cybercriminals love Cobalt Strike

Malware-Analysis-Reports/MountLocker at master · Finch4/Malware-Analysis-Reports

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware-Analysis-Reports/MountLocker at master · Finch4/Malware-Analysis-Reports

Mount Locker Ransomware Steps up Counter-IR Capabilities, Hindering Efforts for Detection, Response and Investigation

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Mount Locker Ransomware Steps up Counter-IR Capabilities, Hindering Efforts for Detection, Response and Investigation

PaaS, or how hackers evade antivirus software

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor PaaS, or how hackers evade antivirus software

RL Blog | ReversingLabs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RL Blog | ReversingLabs

unit42-ransomware-threat-report-2021.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor unit42-ransomware-threat-report-2021.pdf

So Unchill: Melting UNC2198 ICEDID to Ransomware Operations | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor So Unchill: Melting UNC2198 ICEDID to Ransomware Operations | Mandiant

Report2021GTR.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Report2021GTR.pdf

Excel spreadsheets push SystemBC malware - SANS ISC

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Excel spreadsheets push SystemBC malware - SANS ISC

MAN1, Moskal, Hancitor and a side of Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor MAN1, Moskal, Hancitor and a side of Ransomware

Between a rock and a hard place - exploring mount locker ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Between a rock and a hard place - exploring mount locker ransomware

Secure Communications Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Secure Communications Blog

Mount Locker ransomware now targets your TurboTax tax returns

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Mount Locker ransomware now targets your TurboTax tax returns

HelloKitty, Kitty

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor HelloKitty, Kitty

Biotech research firm Miltenyi Biotec hit by ransomware, data leaked

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Biotech research firm Miltenyi Biotec hit by ransomware, data leaked

Mount Locker ransomware joins the multi-million dollar ransom game

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Mount Locker ransomware joins the multi-million dollar ransom game

wp-spark-state-of-ransomware.pdf

file creation date fromORKL

The original link failed its last check. Original publisher Detailsfor wp-spark-state-of-ransomware.pdf

Flashpoint_Hunt_Team___Zeppelin_Ransomware_Analysis.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Flashpoint_Hunt_Team___Zeppelin_Ransomware_Analysis.pdf

Ransomware on the Rise: Buran’s transformation into Zeppelin

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware on the Rise: Buran’s transformation into Zeppelin

Blog | Arctic Wolf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blog | Arctic Wolf

SystemBC: RIG & Fallout Exploit Kits Campaign Analysis | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SystemBC: RIG & Fallout Exploit Kits Campaign Analysis | Proofpoint US

Blog Archive - SpamTitan Email Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blog Archive - SpamTitan Email Security