Displaying items by tag: Black Basta

GUEST RESEARCH:  Rapid7 published its analysis of the Black Basta ransomware campaign, having observed a resurgence of activity related to the ongoing social engineering campaign being conducted by the group.

Access to the network of document storage and records lifecycle solutions provider ZircoDATA was sold on the Exploit forum in January about a fortnight before the company's data was encrypted by the Black Basta ransomware group.

Secure document storage and records lifecycle solutions provider ZircoDATA has been hit by the Black Basta ransomware gang, with the company saying it had noticed unauthorised access of its servers on 28 February.

GUEST RESEARCH: On 29 August 2023, US law enforcement announced a multinational operation that disrupted the Qakbot botnet (also known as Qbot) and associated infrastructure. Secureworks Counter Threat Unit (CTU) researchers have long maintained active monitoring of the botnet and detected the disruption activity on 25 August.

Australia experienced two industrial ransomware attacks in the third quarter of the year, the industrial security firm Dragos says in an analysis of such attacks that occurred globally.