Author: Admin

Attackers will vow to publicly release the stolen data, try to delete any backups and even deploy DDoS attacks to convince victims to give in to the ransom demands, says Sophos. Image: Shutterstock/Vchal Cybercriminals who employ ransomware have gotten much bolder in recent years. Beyond stealing sensitive data, such criminals will turn to a variety of tactics to further persuade the victim to pay the ransom. A new report from security firm Sophos look at…

Security researchers have discovered a new data exfiltration tool designed to accelerate information theft for ransomware groups using the BlackMatter variant. The Symantec Threat Hunter team explained in a new blog post today that the custom tool is the third discovery of its kind, following the development of the Ryuk Stealer tool and the LockBit-linked StealBit. Dubbed “Exmatter,” it is designed to steal specific file types from selected directories and then upload them to a…

Data on countless celebrities, politicians and heads of state appear to be in the hands of ransomware actors after a group using the Conti variant compromised a high-end jeweler over the weekend. London-based Graff, which sells diamond jewelry to the super-rich, confirmed the news in a statement sent to Sky News. “Regrettably we, in common with a number of other businesses, have recently been the target of a sophisticated – though limited – cyber-attack by…

Twelve threat actors were singled out by Europol last week in a major ransomware operation targeting multiple organized crime groups. The unnamed suspected are believed to have been involved in deploying the LockerGoga, MegaCortex and Dharma variants or laundering the proceeds, the trans-national policing group claimed. Focusing their efforts mainly on large organizations, the suspects impacted over 1800 victims in 71 countries, it added. Individual players had specific roles, such as: gaining initial network access…

Recently we were examining a vSphere cluster where vRealize Operations Manager was showing 100% CPU utilisation, with zero capacity remaining. However, the usage of all resources in the cluster was generally low. We know that the cluster capacity is based on demand rather than usage. CPU demand is the amount of CPU resources a virtual machine would use if there were no CPU contention or limit. Sometimes, this can cause a little confusion when we…