Google Cloud's Mandiant reports significantly reduced activity from the Scattered Spider cybercrime group following UK arrests, but warns organizations to use this reprieve to strengthen defenses. The group previously targeted VMware ESXi hypervisors in retail, airline, and transportation ...
FIN7, a Russian cybercrime group, is deploying a Python-based backdoor called Anubis to remotely control compromised Windows systems. The malware spreads through malicious spam campaigns targeting SharePoint sites and executes directly in memory to avoid detection. Anubis establishes encod...
Internal Matrix chat logs from the Black Basta ransomware operation have been leaked, revealing communications from September 2023 to September 2024. The breach exposes phishing templates, cryptocurrency wallets, victim data, and information about key gang members. Since its emergence in A...
Analysis reveals identical code usage between HellCat and Morpheus ransomware operations, both emerging in late 2024. The ransomware variants share technical characteristics including 64-bit execution, similar file exclusions, and cryptographic implementations. This discovery comes amid re...
Three Russian nationals face U.S. charges for operating cryptocurrency mixing services Blender.io and Sinbad.io, which laundered hundreds of millions in criminal proceeds, including funds from ransomware attacks and North Korean hackers. Two suspects are in custody while one remains at lar...
