Evolve Bank Data Breach Impacts 7.6 Million People

July 9, 2024 at 09:33AM Evolve Bank & Trust notified 7.6 million individuals of a recent LockBit ransomware attack compromising personal information, including names, Social Security numbers, and bank account information. The company confirmed the incident, stating no ransom was paid, and offered free credit monitoring and identity protection services. There’s no evidence of customer … Read more

Evolve Bank Shares Data Breach Details as Fintech Firms Report Being Hit

July 2, 2024 at 09:22AM Wise and Affirm acknowledge the impact of the recent Evolve Bank data breach on their customers. The cybercriminals gained access to customer and financial technology partner information, affecting customers who used both companies’ services. Evolve clarified that the ransomware group LockBit was behind the attack, compromising various personal and banking … Read more

LockBit Attack Targets Evolve Bank, Not Federal Reserve

June 28, 2024 at 11:11AM Evolve Bank, headquartered in Arkansas, was targeted by LockBit ransomware, resulting in a data leak on the Dark Web. Despite this, Evolve assures customers that retail banking services remain secure. The incident followed a recent enforcement action by the Federal Reserve against Evolve for deficiencies in anti-money laundering and risk … Read more

Evolve Bank Data Leaked After LockBit’s ‘Federal Reserve Hack’ 

June 27, 2024 at 06:46AM LockBit ransomware threatened to release 33 Tb of data from the US Federal Reserve, but leaked data appears to be from Evolve Bank & Trust, not the central bank. The cybersecurity community expressed skepticism over the claims. Evolve Bank is investigating a cyber incident involving potential personal information compromise, but … Read more

LockBit Ransomware Again Most Active – Real Attack Surge or Smokescreen?

June 20, 2024 at 10:22AM LockBit ransomware group boasted a 665% increase in attack volume in May 2024, reclaiming its spot as the most active gang. Despite disruptions by law enforcement earlier in the year and a subsequent $10 million reward announcement, their activities have rebounded, with a significant uptick in attacks globally. The group’s … Read more

FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims

June 7, 2024 at 05:00AM The FBI has 7,000 decryption keys for LockBit ransomware, aiming to help victims. The gang’s infrastructure was dismantled in an international operation, and its administrator, Dmitry Yuryevich Khoroshev, was identified. Despite this, LockBit remains active, with new variants targeting vulnerable Microsoft SQL servers and VMware ESXi systems. Organizations are warned … Read more

FBI encourages LockBit victims to step right up for free encryption keys

June 6, 2024 at 03:49PM The FBI, together with international partners, took down the LockBit ransomware gang and identified a suspect named Dmitry Khoroshev. They have obtained over 7,000 decryption keys to help victims recover their data. However, victims should still remain cautious as LockBit may still possess their data, emphasizing the importance of preventing … Read more

FBI Says It Has 7,000 LockBit Ransomware Decryption Keys

June 6, 2024 at 05:33AM FBI has obtained over 7,000 LockBit ransomware decryption keys, urging victims to contact them for recovery assistance. Victims advised to reach out to the FBI’s IC3 or use a decryptor developed by Japanese police. LockBit malware used in 2,400+ global attacks, causing billions in damages. Alleged mastermind, Russian national Dimitry … Read more

FBI recovers 7,000 LockBit keys, urges ransomware victims to reach out

June 5, 2024 at 06:50PM The FBI has obtained over 7,000 LockBit decryption keys to help victims recover encrypted data for free. This follows the takedown of LockBit’s infrastructure in “Operation Cronos.” Despite this, LockBit remains active, targeting victims worldwide and leaking stolen data. The U.S. State Department offers rewards for information leading to arrests … Read more

RansomHub Actors Exploit ZeroLogon Vuln in Recent Ransomware Attacks

June 5, 2024 at 05:35PM RansomHub ransomware recently exploited the ZeroLogon flaw in Windows Netlogon Remote Protocol (CVE-2020-1472) for initial access. Symantec identified the use of Atera, Splashtop, and NetScan tools. Organizations are advised to patch the vulnerability. RansomHub, a ransomware-as-a-service, has impacted numerous organizations. It shares extensive code overlaps with the Knight ransomware, likely … Read more