August 8, 2024 at 10:51AM CISA and the FBI confirmed that the Royal ransomware rebranded to BlackSuit and has demanded over $500 million from victims since it emerged. BlackSuit gang has been active since September 2022 and is linked to attacks against over 350 organizations. They sought ransom payments in Bitcoin, with the largest demand … Read more
August 7, 2024 at 06:27PM CISA and the FBI confirmed that the Royal ransomware rebranded to BlackSuit, demanding over $500 million from victims since September 2022. The joint advisory details the gang’s evolution, attack tactics, and linked organizations. Notably, the BlackSuit gang caused a widespread IT outage at CDK Global, affecting over 15,000 car dealerships. … Read more
June 27, 2024 at 06:59PM The BlackSuit ransomware gang targeted Japanese media conglomerate KADOKAWA, leading to widespread system outages and impacting its various operations, including Niconico services. KADOKAWA is focused on restoring its accounting and publication functions. However, the ransomware gang threatens to publish stolen data on July 1 unless a ransom is paid. The … Read more
June 22, 2024 at 03:14PM The BlackSuit ransomware gang caused a massive IT outage at CDK Global, affecting North American car dealerships. CDK is negotiating with BlackSuit for a decryptor and to prevent data leaks. The outage led to manual operation of car dealerships. Major companies like Penske Automotive Group and Sonic Automotive were also … Read more
April 1, 2024 at 09:11PM The Indian government rescued and repatriated 250 citizens from Cambodia, where they were forced into cybercrime after being promised legitimate job opportunities. Collaborating with Cambodian authorities, the government brought the victims back, but India Today reports that at least 5,000 more are still held captive and involved in scams generating … Read more
January 18, 2024 at 05:21AM Security researchers have traced a DDoS botnet infecting millions of smart TVs and set-top boxes to the Bigpanzi cybercrime syndicate. At its peak, 170,000 bots were running daily and were used for cybercrimes such as DDoS attacks and hijacking broadcasts. The researchers aim to combat Bigpanzi and seek collaboration from … Read more
November 15, 2023 at 02:24PM The Toronto Public Library (TPL) experienced a ransomware attack in October, resulting in the theft of personal information belonging to employees, customers, volunteers, and donors. The compromised file server contained data dating back to 1998, including names, social insurance numbers, birth dates, home addresses, and government-issued identification documents. The library … Read more