Brett Callow of Emsisoft broke the unpleasant news on Twitter last night — REvil’s dedicated leak site, “The Happy Blog,” which had disappeared after the Kaseya supply chain attack, had reappeared at its old onion address. Unfortunately, the Happy Blog is back online #REvil pic.twitter.com/vMr9qTOht2 — Brett Callow (@BrettCallow) September 7, 2021 There were no…
Category: Malware
WV: Bridgeport city government hacked, residents put on notice
Mike Nolting reports: Residents of Bridgeport have been notified city government was hacked in late May of this year. A five-page letter to residents said city IT systems were encrypted by ransomware that lets hackers hold data until a ransom is paid. […] There is no proof hackers were able to access information, but information…
Th: Hacker steals 40,000 patients’ data from kidney hospital
It is the second hospital report in as many days. This one, however, is clearly a ransomware attack and unlike the first hospital attack, no one is making any attempt to minimize this one as the theft of patient data is impacting treatment. The Bangkok Post reports: The personal details of more than 40,000 patients…
Afghanistan becomes the primary target for ransomware attacks following Taliban takeover
Paul Skeldon reports; The recent Taliban takeover of the government in Afghanistan has brought a lot of chaos upon the nation – and cybercriminals are seeing that such disorder in the country is another chance for them to benefit. According to the Atlas VPN team data analysis, Afghanistan became the primary target for ransomware attacks worldwide in…
Howard University investigates alleged ransomware attack
Ida Domingo reports: Howard University announced Monday that they are investigating a ransomware attack. According to school officials, their information technology team detected unusual activity on the school’s network last Friday. Due to the unusual activity, the school’s Enterprise Technology Services (ETS) intentionally shut down the university’s network to investigate. Read more on 7News.
TrickBot gang member arrested after getting stuck in South Korea due to COVID-19 pandemic
Catalin Cimpanu reports: A Russian man was arrested last week at the Seoul international airport on accusations of developing code for the TrickBot malware gang. The man, identified in local media reports only as Mr. A, was arrested trying to leave South Korea for his native home in Russia after he’d been stuck in the…