Ransomware gang files SEC complaint over victim’s undisclosed breach

November 15, 2023 at 09:04PM The ALPHV/BlackCat ransomware group has filed a complaint with the U.S. Securities and Exchange Commission (SEC) against software company MeridianLink for not disclosing a cyberattack within the four-day rule. The ransomware group threatened to leak stolen data unless a ransom was paid. MeridianLink confirmed the cyberattack and stated that it … Read more

LockBit ransomware leaks gigabytes of Boeing data

November 12, 2023 at 06:56PM LockBit ransomware has leaked more than 43GB of files stolen from Boeing after the aerospace company refused to pay the ransom. The leaked data includes backups for various systems, with the most recent files dated October 22. LockBit had warned Boeing about the leak and threatened to publish a sample … Read more

Russian-speaking threat actor “farnetwork” linked to 5 ransomware gangs

November 8, 2023 at 04:37AM The Nokoyawa ransomware-as-a-service (RaaS) operator, ‘farnetwork’, was involved in malware development and operation management for various affiliate programs. A cybersecurity company, Group-IB, reported their activities and revealed their connections to ransomware operations since 2019. Despite retiring the Nokoyawa RaaS program, it is believed that farnetwork will rebrand and continue their … Read more

Ransomware crooks SIM swap medical research biz exec, threaten to leak stolen data

November 1, 2023 at 06:52PM A cybercriminal group called Alphv, also known as BlackCat, claims to have stolen data from Advarra, a firm that helps run medical trials. The group gained access to an executive’s account by SIM swapping their cellphone number. The attackers have threatened to leak the stolen data if a ransom is … Read more

Boeing Breached by Ransomware, LockBit Gang Claims

October 30, 2023 at 03:00PM The ransomware group LockBit claims to have breached Boeing and threatens to release sensitive data if their ransom demands aren’t met by November 2. Boeing is evaluating the claim, and if true, it could lead to significant consequences, including an increased risk of phishing attacks. LockBit, known for their previous … Read more

New Hunters International ransomware possible rebrand of Hive

October 29, 2023 at 08:00PM Hunters International, a new ransomware-as-a-service brand, appears to be linked to the Hive ransomware operation. Analysis of the Hunters International malware reveals significant code similarities with the Hive ransomware. However, Hunters International denies the allegations, claiming they purchased the encryptor source code from Hive developers. The group emphasizes that their … Read more

American Family Insurance confirms cyberattack is behind IT outages

October 21, 2023 at 04:14PM Insurance giant American Family Insurance experienced a cyberattack, leading to the shutdown of certain IT systems. The company detected unusual activity and took precautionary measures to protect data. While no compromises to critical systems have been detected, customers faced outages and were unable to access online services. Investigations are ongoing, … Read more

Europol Dismantles Ragnar Locker Ransomware Infrastructure, Nabs Key Developer

October 21, 2023 at 10:21AM Europol has successfully taken down the infrastructure associated with the Ragnar Locker ransomware and arrested a key suspect in France. Searches were conducted in Czechia, Spain, and Latvia, resulting in the arrest of the main perpetrator. Five other accomplices were interviewed, and servers and data leak portals were seized in … Read more

Europol Strike Wounds Ragnar Locker Ransomware Group

October 19, 2023 at 03:29PM Law enforcement has taken down Ragnar Locker’s Tor negotiation and data leak sites, stating that they were seized in a coordinated international action. Europol, along with officials from the US and Japan, is involved in taking action against the ransomware group. Experts warn that this may only be a temporary … Read more

Ragnar Locker ransomware’s dark web extortion sites seized by police

October 19, 2023 at 10:50AM Law enforcement agencies from multiple countries have seized the Tor negotiation and data leak sites belonging to the Ragnar Locker ransomware group. The seizure message displayed on the websites indicates that a coordinated international operation involving law enforcement from the US, Europe, Germany, France, Italy, Japan, Spain, Netherlands, and Latvia … Read more