Ransomware’s popularity has attracted the attention of cybercriminal gangs; they use these malicious programs in targeted attacks on large organizations in order to steal money. In late 2016, we detected an increase in the number of attacks, the main goal of which was to launch an encryptor on an organization’s network nodes and servers.

Reports

We continue to track the BlueNoroff group’s activities and this October we observed the adoption of new malware strains in its arsenal.

In this report, we compare the ROADSWEEP ransomware and ZEROCLEARE wiper versions used in two waves of attacks against Albanian government organizations.

While hunting for less common Deathstalker intrusions, we identified a new Janicab variant used in targeting legal entities in the Middle East throughout 2020.

This is our latest summary of advanced persistent threat (APT) activities, focusing on events that we observed during Q3 2022.

SAS

Ransomware in targeted attacks

ATMitch: remote administration of ATMs

Lazarus Under The Hood

Penquin’s Moonlit Maze

Top 8 Reasons You Don’t Want to Miss SAS 2017

Dissecting Malware

How to succeed in online investigations and digital forensics

How to hunt for rare malware

Caribbean scuba diving with IT-security in mind

Experts: what ATM jackpotting malware is

Congratulations, you’ve won! The reality behind online lotteries

Keyloggers: How they work and how to detect them (Part 1)

Scammers’ delivery service: exclusively dangerous

Subscribe

Reports

BlueNoroff introduces new methods bypassing MoTW

Ransomware and wiper signed with stolen certificates

DeathStalker targets legal entities with new Janicab variant

APT trends report Q3 2022

Subscribe to our weekly e-mails