Displaying items by tag: Intel471

Nearly 10 months after it was taken down by authorities in Europe, the US and Canada, the Emotet botnet appears to have returned, with at least one of the bots associated with it being observed by a security firm.

A blog post published by the security firm Flashpoint on 22 October appears to have been the starting point for the claim that a supposedly new ransomware gang Groove was a hoax and one designed to make both security firms and the media look foolish.

The people behind a new ransomware group, Groove, have threatened to start attacking public sector businesses in Ukraine if the government of that country does not stop extraditing citizens to the US.

The affiliate of ransomware operator DarkSide, the Windows malware that was used to attack the US Colonial Pipeline Company, appears to have taken on a target that was outside the parameters set down by the operator, judging from a statement made by the operator on its site on the dark web.

A man who claims to be a member of the group behind the Windows REvil ransomware says the group takes in more than US$100 million (A$1.4 million) annually through ransom payments.

Singapore-based Russian security firm Group-IB has placed itself squarely in the crosshairs of the US Government by revealing exhaustive details about an alleged criminal and thus forcing American law enforcement to drop its objection to making details of a sealed indictment against the man public.