ransomware - ISH Technology

April 3rd, 2024April 3rd, 2024

CloAk ransomware encrypts data and operates with other groups to pressure ransom payments

By Heimdall: The CloAk Ransomware, which emerged between late 2022 and early 2023, represents a relatively new group of ransomware that has stood out mainly for its activities in Europe, with a special focus on Germany. This malware...

March 22nd, 2024March 22nd, 2024

Rebecca BezerraBlog No Comments

Snatch: ransomware encrypts files and manages to avoid detection by antivirus. Find out more about its operation

By Heimdall: The Snatch Ransomware, in its operations, has affected various types of organizations, from the most varied segments. The group has apparently been active for approximately 5 years since it was first identified, adopting specific characteristics in its attacks, such as the use...

February 28, 2024February 28, 2024

Rebecca BezerraBlog No Comments

Ransomware .infected: learn details about the operation of the MedusaLocker ransomware variant

By Heimdall and ISH DFIR: A ransomware variant of the MedusaLocker family, known as ".infected", identified in mid-September 2019, continues to operate and affect several organizations around the world. This ransomware works by encrypting...

October 18th, 2023October 18th, 2023

Rebecca BezerraBlog No Comments

What is the life cycle of a ransomware attack like?

By Caique Barqueta: Our Threat Intelligence team, Heimdall, has analyzed and explained in detail the entire life cycle of a ransomware incident, exposing some details of the techniques used for initial access, persistence and lateral movement, as well as the impact...

July 5, 2023July 5, 2023

Rebecca BezerraBlog No Comments

8base Ransomware: Hackers ramp up double extortion attacks in recent months and use encryption to leak data

By Caique Barqueta: The 8base ransomware group first came to prominence in early March 2022, remaining relatively quiet after only a few attacks. They act like the other ransomware groups, by means of double extortions (encryption +...

June 21, 2023June 21, 2023

Rebecca BezerraBlog No Comments

Cyber attacks and data theft: see how to protect your company

By Caique Barqueta: Ransomware attacks have been getting better and better. Cybercriminals are employing other extortion tactics, such as stealing information before encryption is performed, acting as a "double extortion" as the actors demand...

February 6, 2023February 6, 2023

Jessica TrucatBlog No Comments

Alert for large-scale attacks against VMware ESXi Servers

By Caique Barqueta: Thousands of servers around the world are being hit by a large-scale hacker attack that demands Bitcoin for ransom. Countries like Italy, France, Finland, the United States and Canada are being attacked. In France, for example, the...

December 13, 2022December 13, 2022

Jessica TrucatBlog

Ransomware as a Service (RaaS): The Signature Service Most Affecting Enterprises

By Caique Barqueta: Ransomware attacks remain steadily increasing. This increase is derived from a new sales model, the so-called "Ransomware-as-a-Service" (RaaS). Such a model is subscription-based and allows affiliates to...

October 19, 2022October 19, 2022

Jessica TrucatBlog No Comments

The Business Dangers of LockBit 3.0 Ransomware: Understand how the malicious software operates

By Caique Barqueta: Ransomware is a very lethal type of malware for all technology assets. But what actually makes it dangerous? As the name implies, "ransom" means "Ransomware" - so it is a software...

July 14, 2022March 22, 2023

Fabricio VieiraBlog No Comments

Demand for ransomware-as-a-service (RaaS) will increase and your company could be the next victim

Ransomware attacks are becoming increasingly sophisticated and complex, even evolving into an on-demand service (RaaS) among digital criminals, facilitating attacks and invasions of data systems and harming thousands of companies a year. O...

1 2 3

CloAk ransomware encrypts data and operates with other groups to pressure ransom payments

Snatch: ransomware encrypts files and manages to avoid detection by antivirus. Find out more about its operation

Ransomware .infected: learn details about the operation of the MedusaLocker ransomware variant

What is the life cycle of a ransomware attack like?

8base Ransomware: Hackers ramp up double extortion attacks in recent months and use encryption to leak data

Cyber attacks and data theft: see how to protect your company

Alert for large-scale attacks against VMware ESXi Servers

Ransomware as a Service (RaaS): The Signature Service Most Affecting Enterprises

The Business Dangers of LockBit 3.0 Ransomware: Understand how the malicious software operates

Demand for ransomware-as-a-service (RaaS) will increase and your company could be the next victim

Solutions

vertical

important links