Lindsey O’Donnell-Welch reports: A known Russia-linked threat group has been targeting an array of organizations in Ukraine – including government, military, law enforcment, non-profit and judiciary entities – in an attempt to steal sensitive data. Microsoft detailed several malware campaigns over the past six months by the Actinium threat group (also known as Gamaredon or…
Category: Malware
Microsoft plans to kill malware delivery via Office macros
If you use Word and always feel concerned when you “enable macros” because of the risk of malware, here’s some good news. Sergiu Gatlan reports: Microsoft announced today that it will make it difficult to enable VBA macros downloaded from the Internet in several Microsoft Office apps starting in early April, effectively killing a popular…
Indicators of Compromise Associated with LockBit 2.0 Ransomware and Additional Mitigations
On February 4, the FBI issued a Flash Alert: Indicators of Compromise Associated with LockBit 2.0 Ransomware Today, HHS’s Cybersecurity Program issued its companion HC3 alert. It says, in part: Impact to HPH Sector Although the LockBit 2.0 cybercrime gang claims to not attack healthcare organizations, all ransomware continues to act as a major cyber…
More than half of Canadian ransomware victims paid the ransom demands in 2021 – study
TORONTO, Febr. 7, 2022 /CNW/ – Canadian IT company, NOVIPRO, today unveiled its sixth annual IT Portrait of Canadian Businesses in collaboration with Leger, which revealed the deep vulnerability of Canadian companies to computer attacks. The study reveals that more than half (56%) of organizations targeted by malware have paid the amounts requested by cybercriminals. Of these,…
Swissport ransomware attack leads to flight delays
Connor Jones reports: Aviation services company Swissport announced it was the victim of a ransomware attack on Friday, with some flights forced into delays and other operations disrupted. Neither the ransomware operator nor the type of ransomware used against the company is currently known, but the company reacted quickly to contain the attack, despite the disruption it caused….
An ALPHV (BlackCat) representative discusses the group’s plans for a ransomware ‘meta-universe’
Interesting interview by Dmitry Smilyanets.