Threat spotlight

Threat profile: Egregor ransomware is making a name for itself - The Egregror ransomware is quickly making a name for itself by victimizing big corporations. How does it work and what is its background?
Threat spotlight: WastedLocker, customized ransomware - WastedLocker ransomware, attributed to the Russian Evil Corp gang, is such a targeted threat, you might call it a custom-built ransomware family.
Search hijackers change Chrome policy to remote administration - Search hijackers are always looking for ways to get and stay installed. Here is one that changed a Chrome policy and set it to remote administration.
Maze: the ransomware that introduced an extra twist - Maze ransomware attacks featured the first group of cyber-criminals to add the threat of publishing exfiltrated data to the ransomware business model
Threat spotlight: RobbinHood ransomware takes the driver’s seat - RobbinHood a is a ransomware family that specifically targets organizations using a vulnerable kernel driver to prepare systems for encryption. Learn how to protect against it.
Business in the front, party in the back: backdoors in elastic servers expose private data - It's all too easy to discover data leaks online, especially in cloud services. We take a look at misconfigurations in elastic servers that lead to exposed data on the Internet.
Threat spotlight: Phobos ransomware lives up to its name - Phobos, which many believe was named after the Greek god of fear, isn’t as widespread as it was before nor is it more novel than your average ransomware. Yet, it remains a threat to consumers and businesses alike. We dive into Phobos ransomware and show users how to face their fears and protect against it.
Threat spotlight: the curious case of Ryuk ransomware - From comic book death god to ransomware baddie, Ryuk ransomware remains a mainstay when organizations find themselves in a crippling malware pinch. We look at Ryuk's origins, attack methods, and how to protect against this ever-present threat.
Threat Spotlight: Sodinokibi ransomware attempts to fill GandCrab void - There’s a new ransomware-as-a-service (RaaS) in town, and it can twist tongues for giggles as much as twist organizations' arms for cash. Get to know the Sodinokibi ransomware, including how to protect against this fledgling threat.

Select your language