[ad_1]
At this time, the Russian authorities introduced that they arrested fourteen members of the REvil ransomware gang on behalf of US authorities.
Whereas the ransomware gang members are solely being charged with “unlawful circulation of technique of cost,” the arrests are the primary public motion by Russia to stem the actions of ransomware gangs working throughout the nation.
Moreover, Russia states that they took this motion on behalf of US regulation enforcement, who they’ve traditionally been reluctant to assist in felony cybercrime investigations.
Nonetheless, some risk actors imagine that that is simply Russia attempting to appease the USA and that future regulation enforcement cooperation won’t be widespread.
Ukrainian police additionally arrested members of a ransomware operation who encrypted no less than fifty companies within the USA and Europe. Nonetheless, the title of the ransomware gang has not been disclosed.
Different information this week is the discovering of a Linux encryptor for the AvosLocker ransomware operation that targets VMware ESXi, the Night time Sky ransomware operation utilizing Log4j assaults, TellYouThePass returns as a multi-platform Golang risk, and that Magniber ransomware utilizing signed APPX information to contaminate victims.
Contributors and those that offered new ransomware info and tales this week embrace: @fwosar, @BleepinComputer, @DanielGallagher, @PolarToffee, @malwrhunterteam, @demonslay335, @billtoulas, @jorntvdw, @serghei, @VK_Intel, @malwareforme, @struppigel, @LawrenceAbrams, @FourOctets, @Ionut_Ilascu, @Seifreed, @ahnlab, @CrowdStrike, @MsftSecIntel, @ChristiaanBeek, @fbgwls245, @Amigo_A_,@JakubKroustek, and @pcrisk.
January eighth 2022
New Wasp Ransomware
dnwls0719 discovered the brand new Wasp Ransomware that appends the .0.locked extension to encrypted information.
January tenth 2022
Linux model of AvosLocker ransomware targets VMware ESXi servers
AvosLocker is the newest ransomware gang that has added help for encrypting Linux programs to its current malware variants, particularly concentrating on VMware ESXi digital machines.
FinalSite: No college information stolen in ransomware assault behind website outages
FinalSite introduced at present the findings of a six-day investigation into final week’s ransomware assault, stating it discovered no proof faculties’ information accessed or stolen by hackers.
New STOP Ransomware variant
Jakub Kroustek discovered a brand new STOP ransomware variant that appends the .nqhd extension.
January eleventh 2022
Night time Sky ransomware makes use of Log4j bug to hack VMware Horizon servers
The Night time Sky ransomware gang has began to take advantage of the vital CVE-2021-44228 vulnerability within the Log4j logging library, also referred to as Log4Shell, to achieve entry to VMware Horizon programs.
January twelfth 2022
Magniber ransomware utilizing signed APPX information to contaminate programs
The Magniber ransomware has been noticed utilizing Home windows software package deal information (.APPX) signed with legitimate certificates to drop malware pretending to be Chrome and Edge net browser updates.
TellYouThePass ransomware returns as a cross-platform Golang risk
TellYouThePass ransomware has re-emerged as a Golang-compiled malware, making it simpler to focus on extra working programs, macOS and Linux, particularly.
Faculty’s out as cyberattack forces APS to cancel lessons
A cyberattack in opposition to Albuquerque Public Colleges prompted the state’s largest district to cancel all lessons districtwide on Thursday and probably Friday.
New STOP ransomware variant
PCrisk discovered a brand new STOP ransomware variant that appends the .zaqi extension to encrypted information.
January thirteenth 2022
Ukranian police arrests ransomware gang that hit over 50 companies
Ukrainian cops have arrested a ransomware affiliate group answerable for attacking no less than 50 firms within the U.S. and Europe.
January 14th 2022
Russia arrests REvil ransomware gang members, seize $6.6 million
The Federal Safety Service (FSB) of the Russian Federation says that they shut down the REvil ransomware gang after U.S. authorities reported on the chief.
That is it for this week! Hope everybody has a pleasant weekend!
[ad_2]
