A new ransomware variant called Helldown has emerged, featuring both Windows and Linux versions. Key points:

Helldown Characteristics:
– Based on LockBit 3.0 code
– Targets multiple sectors including IT, telecommunications, manufacturing, and healthcare
– Uses double extortion tactics (data encryption and theft)
– Has attacked 31 companies in three months
– Exploits Zyxel firewall vulnerabilities for initial access

Technical Details:
– Windows version: Deletes shadow copies, terminates database processes, and removes traces
– Linux version: Less sophisticated, targets virtual machines but shows signs of being in development
– Possible connection to DarkRace/DoNex ransomware

New Threat: Interlock
– Targets healthcare, technology, and government sectors
– Affects both Windows and Linux systems
– Uses sophisticated delivery method through fake Chrome updates
– Shows possible connections to Rhysida ransomware group

Industry Impact:
– LockBit 3.0 source code leak has led to multiple new variants
– Ransomware groups are diversifying their capabilities
– Increased collaboration between different ransomware operators
– Growing sophistication in attack methods

This evolution in ransomware threats highlights the need for enhanced security measures, particularly in protecting virtualized infrastructures and maintaining proper firewall security.