ransomware
"Sizable economic shocks in different industries are starting to arrive via teenagers"
Latest victim of Warlock ransomware linked to Sharepoint vulns.
CEO of fleet management firm Microlise, Nadeem Raza, shares the inside story of the October 2024 cyberattack
Operation Checkmate takes servers, domains from the group
Interlock is known for using "double extortion methods" to encrypt and exfiltrate data.
Insurers and vendors alike call for clarity on who would be affected, and what reporting mandates will look like.
In earlier SafePay attacks the group has actively gone after backups and deleted Volume Shadow Copies (VSC) in an effort to inhibit recovery activities.
Full-scale encryption, local exfiltration and self-cleanup into a single Rust binary.
A range of ransomware groups have been seen spoofing IT support numbers or abusing default Teams credentials in social engineering attacks over the past 18 months.