Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Malware

devo

Ransomware Attacks: Held Hostage by Code

Jul 10, 2024 By Devo In Devo
Data is among the most valuable assets for companies, making it a prime target for malicious actors. Ransomware attacks that seize data and demand a price for its return have become a significant concern for businesses and individuals. According to the Verizon 2024 Data Breach Investigations Report, about one-third of all breaches involved ransomware or another extortion technique. Here’s everything you need to know about ransomware and how to prevent a successful attack.
Read Post
foresiet

Understanding Prince Ransomware: A Comprehensive Overview

Jul 10, 2024 By Foresiet In Foresiet
In the ever-evolving landscape of cybersecurity threats, ransomware remains a formidable adversary. Among the recent additions to this domain is Prince Ransomware, a sophisticated piece of malware written from scratch in Go. This blog will provide an in-depth look at Prince Ransomware, its unique encryption mechanisms, the process of building and deploying it, and the ethical considerations surrounding its release as an open-source project. What is Prince Ransomware?
Read Post
Rubrik

How Rubrik Supports Least Privileged Access in Microsoft Azure Cloud

Jul 10, 2024 By Anuwat Sisaleumsak and In Rubrik
The digital landscape is wild--and getting wilder. Research from Rubrik Zero Labs shows that cyber attacks are on the rise, with 94% of organizations reporting a significant attack in the last year. And the attacks are effectively disrupting business, with 62% of those reporting an attack revealing that their systems were compromised. So security teams need to use all of the tools in their toolkits to protect the enterprise.
Read Post
Forescout

New RedTail Malware Exploited Via PHP Security Vulnerability

Jul 10, 2024 By Prashant Tilekar In Forescout
RedTail is a sophisticated malware designed for unauthorized cryptocurrency mining with a focus on Monero. It was first identified in January 2024, but it has been circulating since at least December 2023. Its latest iterations show improvements in evasion and persistence mechanisms, underscoring the significant expertise and resources driving its development.
Read Post
knowbe4

The Importance of Security Culture: When Telecom Giants Resort to Malware

Jul 9, 2024 By Javvad Malik In KnowBe4
I recently read a story about a South Korean telecom company that pushed out malware to over 600,000 of its customers who were using torrents to share files, in a bid to limit their file-sharing capabilities. Users reported that their files went missing, random folders appeared, and in some cases, their PCs were disabled.
Read Post
trilio

How to Create a Ransomware Recovery Plan & Prevent Attacks

Jul 8, 2024 By David Safaii In Trilio
Ransomware isn’t just a threat—it’s a harsh reality facing IT professionals in many industries. And while Kubernetes and OpenShift are powerful platforms for modern infrastructure, they introduce unique complexities that cybercriminals can exploit. The fallout from a successful attack is well documented: significant financial loss, operational downtime, and potential damage to your organization’s reputation.
Read Post
fireblocks

Understanding an 0ktapus Phishing Campaign

Jul 8, 2024 By Fireblocks In Fireblocks
The recent surge in phishing attacks capable of bypassing multi-factor authentication (MFA) has raised significant concerns in the cybersecurity landscape. These attacks highlight the fact that even systems protected by MFA have vulnerabilities, making it imperative for organizations to stay vigilant and not rely on a single control as a silver bullet. One such campaign, known as 0ktapus, provides a crucial case study in understanding the methods and impacts of these phishing attacks.
Read Post

UX Design and Research for AI-Driven Products with Rubrik User Researcher Tianmi Fang

Jul 8, 2024 By Rubrik In Rubrik
In this video, we delve into the design process of Rubrik Ruby, your generative AI-powered cyber recovery companion, and how it addresses real user problems for security and IT teams. We took a different approach by focusing on understanding user pain points and leveraging the power of AI to provide solutions. One of Ruby's key benefits is its ability to automate repetitive tasks, freeing up your time and energy. Ruby utilizes AI and automation to prioritize overwhelming information, ensuring that you get what you need when you need it.
View Video
foresiet

Volcano Demon Ransomware Group Uses Phone Calls for Direct Extortion

Jul 5, 2024 By Foresiet In Foresiet
A newly identified ransomware group, "Volcano Demon," has emerged, targeting executives directly with threatening phone calls instead of the typical data leak sites. Over the past two weeks, this group has carried out several attacks, deploying a unique ransomware variant known as “LukaLocker,” according to a report from Halcyon. LukaLocker Ransomware Attack Overview Volcano Demon’s ransomware, LukaLocker, encrypts files with a.nba extension.
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.