[ad_1]
With the vacations these previous two weeks, there have been just a few identified ransomware assaults and little analysis launched.
On the finish of December, a brand new enterprise-targeting ransomware operation known as Evening Sky was launched, however it’s not very energetic to this point.
We additionally noticed a rise in Qlocker and eCh0raix campaigns concentrating on QNAP NAS gadgets, resulting in QNAP releasing a safety advisory.
Essentially the most noteworthy info that got here out at the moment is a brand new FBI flash alert warning that FIN7 hackers had been sending malicious USB drives to protection companies that deployed REvil and BlackMatter ransomware.
Lastly, there have been a couple of ransomware assaults over the previous two weeks, together with FinalSite, Bernalillo County, and SIC.
Now that the vacations are over, we are able to count on to see extra assaults by risk actors and analysis associated to new TTPs.
Contributors and those that supplied new ransomware info and tales this week embrace: @PolarToffee, @LawrenceAbrams, @VK_Intel, @FourOctets, @jorntvdw, @serghei, @Ionut_Ilascu, @DanielGallagher, @struppigel, @malwrhunterteam, @billtoulas, @malwareforme, @demonslay335, @fwosar, @BleepinComputer, @Seifreed, @BrettCallow, @pancak3lullz, @fbgwls245, @brfreed, @campuscodi, and @Amigo_A_,
January 1st 2022
New Golang ransomware variant
dnwls0719 discovered a brand new Golang ransomware variant that appends the .xyz extension.
January 2nd 2022
New STOP ransomware variant
Jakub Kroustek discovered a brand new STOP ransomware variant that appends the .loov extension.
New STOP ransomware variant
Jakub Kroustek discovered a brand new STOP ransomware variant that appends the .dehd extension.
Lapsus$ ransomware gang hits SIC, Portugal’s largest TV channel
The Lapsus$ ransomware gang has hacked and is presently extorting Impresa, the biggest media conglomerate in Portugal and the proprietor of SIC and Expresso, the nation’s largest TV channel and weekly newspaper, respectively.
January 4th, 2022
New Mexico county ‘first’ local-government ransomware sufferer of 2022
Authorities buildings in Bernalillo County, New Mexico, had been closed to the general public Wednesday in response to what seems to be the primary ransomware assault this yr in opposition to an area authorities in the US.
January sixth 2022
FinalSite ransomware assault shuts down 1000’s of faculty web sites
FinalSite, a number one faculty web site providers supplier, has suffered a ransomware assault disrupting entry to web sites for 1000’s of colleges worldwide.
Evening Sky is the most recent ransomware concentrating on company networks
It is a new yr, and with it comes a brand new ransomware to control known as ‘Evening Sky’ that targets company networks and steals information in double-extortion assaults.
January seventh 2022
FBI: Hackers goal US protection companies with malicious USB packages
The Federal Bureau of Investigation (FBI) warned US corporations in a not too long ago up to date flash alert that the financially motivated FIN7 cybercriminal group is concentrating on the US protection business with packages containing malicious USB gadgets to deploy ransomware.
QNAP warns of ransomware concentrating on Web-exposed NAS gadgets
QNAP has warned clients at the moment to safe Web-exposed network-attached storage (NAS) gadgets instantly from ongoing ransomware and brute-force assaults.
New Downside ransomware variant
Amigo-A noticed a brand new Downside Ransomware variant that appends the .drawback extension and drops a ransom notice named readme.txt.
That is it for this week! Hope everybody has a pleasant weekend!
[ad_2]
