RaaS
Emulating the Petrifying Medusa Ransomware
AttackIQ has released a new attack graph that emulates the behaviors exhibited by Medusa ransomware since the beginning of its activities in June 2021. Medusa is predominantly propagated through the exploitation of ...

Strengthening Security Posture in the World of Outsourced Ransomware-as-a-Service (RaaS)
These proactive defense measures - vulnerability management, MFA and EDR - remain critical in the ongoing battle against RaaS groups and bad actors ...
Emulating the Long-Term Extortionist Nefilim Ransomware
AttackIQ has released a new attack graph that emulates the behaviors exhibited by the extortionist ransomware Nefilim during activities against multiple organizations, primarily based in North or South America, distributed in the ...

Black Basta Ascension Attack Redux — can Patients Die of Ransomware?
Inglorious Basta(rds): 16 days on, huge hospital system continues to be paralyzed by ransomware—and patient safety is at risk ...

FBI/CISA Warning: ‘Black Basta’ Ransomware Gang vs. Ascension Health
Будет! Russian ransomware rascals riled a Roman Catholic healthcare organization ...

‘Darcula’ PhaaS Campaign Sinks Fangs into Victims
A sprawling phishing-as-a-service (PhaaS) campaign that has been running since at least last summer is using more than 20,000 fake domains to target a wide range of organizations in more than 100 ...

RaaS Groups Go Recruiting in Wake of LockBit, BlackCat Takedowns
The effects of the recent high-profile disruptions of LockBit’s and BlackCat ransomware operations by law enforcement agencies are rippling through the dark web, with smaller threat gangs looking to scoop up the ...
GootLoader: Unloaded
GootLoader, a stealthy JavaScript-based downloader, has posed a persistent threat to Windows-based systems since 2020. In this article, we'll delve into who Gootloader is and how organizations can effectively emulate and test ...

DOJ Seizes Ransomware Site as BlackCat Threatens More Attacks
U.S. law enforcement agencies said they shut down the online operations of the notorious Russia-linked BlackCat ransomware-as-a-service (RaaS) group and developed a decryption tool that will help more than 500 victims regain ...

Making Sense of the 2023 Ransomware Landscape
Understanding the current ransomware landscape is the first step to helping defenders protect their organizations ...