CISA has issued an alert about the Hive ransomware group. Summary Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of…
Search Results for: ransomware
Updating: Michigan school districts reopen after three-day closure due to ransomware attack
Jonathan Greig reports: Public schools in two Michigan counties are reopening on Thursday after a ransomware attack crippled their ability to function and closed doors to students for three days. All of the public schools in Jackson and Hillsdale counties announced their reopening on Thursday in letters to parents, assuring them that cybersecurity experts, tech officials…
TX: Dallas Central Appraisal District Systems Still Down a Week After Ransomware Attack
Jacob Vaughn reports: The website, servers and email for the Dallas Central Appraisal District, or DCAD, have been inaccessible after the entire system was attacked by hackers last week. DCAD, which appraises Dallas County properties for tax purposes, announced early last week on social media that it was the victim of a ransomware attack, and it…
Worok hackers hide new malware in PNGs, while ARCrypter ransomware expands reach from Latam to world
Two reports related to malware: Bill Toulas reports: A threat group tracked as ‘Worok’ hides malware within PNG images to infect victims’ machines with information-stealing malware without raising alarms. This has been confirmed by researchers at Avast, who built upon the findings of ESET, the first to spot and report on Worok’s activity in early…
MI: Ransomware attack responsible for shutdown affecting Jackson, Hillsdale schools
Martin Slagter reports: Jackson County Intermediate School District officials took network systems offline after technology staff determined suspicious activity to be the result of a “ransomware incident.” Public school districts in both counties canceled classes Monday, Nov. 14, with the system outage impacting a wide range of building operations including but not limited to heating,…
Hong Kong regulator issues investigative report on 2021 Fotomax ransomware incident
The Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong published an investigation report today concerning a ransomware attack on the database of Fotomax (F.E.) Limited. From the news release: The investigation arose from a data breach notification lodged by Fotomax with the PCPD on 1 November 2021, which reported that the…