Dark Reading
2 years, 5 months ago
Ransomware Groups Claim Hits on Hyundai Motor Europe and a California Union
The unrelated cyberattacks both occurred in January.
Security news aggregator
Latest coverage for Ransomware
Ransomware encrypts or steals data to disrupt operations and extort victims, making backups, access controls, and incident response essential.
14
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Ransomware is malware used to deny access to systems or data, usually by encrypting files and demanding payment for decryption. Many operations also steal sensitive information and threaten to publish it, so an attack can create both an availability crisis and a privacy or disclosure risk. Initial access may involve phishing, stolen credentials, exposed remote services, or exploitation of unpatched vulnerabilities; attackers may then move through the network before deploying the payload.
Defenses should combine vulnerability management, phishing-resistant authentication where practical, endpoint and network monitoring, and backups that are isolated from routine administrator access and regularly tested for recovery. Organizations should also limit privileges and segment critical systems to reduce the blast radius. An incident requires rapid containment, preservation of forensic evidence, restoration from known-good backups, and assessment of notification, legal, and regulatory obligations. Threat intelligence can help identify relevant criminal infrastructure or tactics, but it does not replace sound access control, patching, detection, and recovery practices.
Showing 14 most recent headlines
Filtered view
Dark Reading
2 years, 5 months ago
MacOS Targeted by New Backdoor Linked to ALPHV Ransomware
MacOS data exfiltration malware poses as an update for Visual Studio code editor.
Bleeping Computer
2 years, 5 months ago
New RustDoor macOS malware impersonates Visual Studio update
A new Rust-based macOS malware spreading as a Visual Studio update to provide backdoor access to compromised systems uses infrastructure linked to the infamous ALPHV/BlackCat ransomware gang. [...]
The Register
2 years, 5 months ago
Uncle Sam sweetens the pot with $15M bounty on Hive ransomware gang members
Honor among thieves about to be put to the test The US government has placed an extra $5 million bounty on Hive ransomware gang members – its second such reward in a year. And it also comes a little over 11 months since the FBI said it had shut down the criminal organization's network.…
Bank Info Security
2 years, 5 months ago
Feds Warn Health Sector About Akira Again, Amid New Attacks
Recent Victims Include Pennsylvania Emergency Dispatch SystemU.S. federal authorities are again warning the healthcare sector about threats from the Akira ransomware group. The latest alert comes on the heels of several recent attacks by the gang, including one last month on Bucks County, Pennsylvania, which affected an IT system used by emergency responders.
Bleeping Computer
2 years, 5 months ago
Hyundai Motor Europe hit by Black Basta ransomware attack
Car maker Hyundai Motor Europe suffered a Black Basta ransomware attack, with the threat actors claiming to have stolen three terabytes of corporate data. [...]
Bleeping Computer
2 years, 5 months ago
US offers $10 million for tips on Hive ransomware leadership
The U.S. State Department offers rewards of up to $10 million for information that could help locate, identify, or arrest members of the Hive ransomware gang. [...]
Bank Info Security
2 years, 5 months ago
Record-Breaking Ransomware Profits Surpassed $1B in 2023
Ongoing Innovation and Sophistication Drive Unparalleled ProfitsAttackers wielding ransomware collectively earned over $1 billion last year - breaking previous records. Their increasingly sophisticated attacks targeted "high-profile institutions and critical infrastructure, including hospitals, schools and government," reported Chainalysis.
Bleeping Computer
2 years, 5 months ago
Ransomware payments reached record $1.1 billion in 2023
Ransomware payments in 2023 soared above $1.1 billion for the first time, shattering previous records and reversing the decline seen in 2022, marking the year as an exceptionally profitable period for ransomware gangs. [...]
Info Security Magazine
2 years, 5 months ago
Ransomware Payments Hit $1bn All-Time High Last Year
Chainalysis monitoring of blockchain transactions reveals ransomware payments hit a record $1bn in 2023
The Register
2 years, 5 months ago
EquiLend back in the saddle as ransom payment rumors swirl
Still no word on how the intruders broke in or the full extent of any possible data compromise Global securities finance tech company EquiLend's systems are now back online after announcing a disruptive ransomware attack nearly two weeks ago.…
The Register
2 years, 5 months ago
New kids on the ransomware block in 2023: Akira and 8Base lead dozens of newbies
How good are your takedowns when fresh gangs are linked to previous ops, though? At least 25 new ransomware gangs emerged in 2023, with Akira and 8Base proving the most "successful," research reveals.…
Dark Reading
2 years, 5 months ago
Teens Committing Scary Cybercrimes: What's Behind the Trend?
Crypto theft, sextortion tactics, swattings, and ransomware: teenagers are increasingly taking up cybercrime for fun and profit — and experts credit an array of contributing factors.
Bank Info Security
2 years, 5 months ago
EquiLend Continues System Restoration Post-Ransomware Attack
Back Online: NGT Platform, Which Handles Daily Transactions Worth $100 BillionFinancial giant EquiLend Holdings said it's brought back online multiple systems, including its NGT platform that handles securities lending transactions worth $2.4 trillion every month, following an outage triggered by ransomware-wielding attackers gaining unauthorized access to its systems.