April 17, 2024 at 10:25AM The term “dark web” refers to websites ending in .onion accessed through a special browser, Tor. Monitoring such sites can provide value in identifying leaked credentials, understanding cybercrime, and stopping attacks. Flare’s TEM solution scans the dark web and illicit Telegram channels to identify and prioritize risks, replacing multiple tools. … Read more
March 27, 2024 at 10:10AM Ransomware evolution in the past months includes LockBit’s blog takedown, BlackCat’s exit, and smaller groups emergence. The ecosystem functions as a complex supply chain with RaaS dominating large groups. Affiliate competition and recent takedowns are shifting the landscape, potentially leading to ecosystem fragmentation. Corporate security recommendations include extensive monitoring, patching … Read more
February 20, 2024 at 10:40AM Ransomware attacks are often initiated by criminals exploiting easily accessible targets, rather than choosing them. Infostealer malware, particularly through Telegram channels, contributes to the proliferation of ransomware attacks. Additionally, initial access brokers sell corporate IT access, which is taken advantage of by ransomware groups and affiliates to carry out attacks, … Read more