The Nitrogen ransomware group was first detected in September 2024 and initially it targeted organizations in the United States and Canada before expanding operations into parts of Africa and Europe. While ransomware.live currently reports 21 known victims, security researchers believe many compromised organizations remain unlisted on Nitrogen’s public blog. Notably, indicators of this malware family...Read More
Cyber security experts have told ITV News they believe Dragonforce was the ransomware used in the cyber attack launched against M&S. It’s been nearly two weeks since customers first reported experiencing issues with various services at the retailer. Contactless payments and click & collect services were the first to be suspended and 13 days later...Read More
A large healthcare organization has disclosed a data breach Ascension was also hit by two significant breaches in 2024 The latest incident could be linked to the Cl0p ransomware attack One of the biggest private healthcare systems in the US, Ascension, has notified patients that personally identifiable information (PII) including health data, was stolen in...Read More
Table of ContentsMaintain Robust, Regular BackupsKeep Software Meticulously UpdatedDevelop a Discerning Eye for Phishing AttemptsImplement Stringent Access ControlsDeploy Trusted Security SolutionsExercise Caution with Remote Connections It’s a crime drama plotline you’ve seen a million times: Professional kidnappers demand a suitcase of unmarked bills in exchange for a hostage’s safe return. The tension builds as the...Read More
In the past, cyber criminals have accessed internal messaging systems of companies including Uber and Rockstar Games to spy on communications and post ransom demands. These kinds of tactics were used by a group called Lapsus$ which was made up of English speaking teenagers – two of whom were arrested and convicted in the UK...Read More
Two East Idaho school districts — Jefferson County and American Falls — were recently targeted in ransomware attacks that temporarily disabled their systems and derailed learning. For weeks, students and teachers had to revert to “old-school” learning — without the aid of devices or internet. Teachers could not access email, grade books or school phones. ...Read More
The UK’s data protection overlord is not going to pursue any further investigation into the British Library’s 2023 ransomware attack. The Information Commissioner’s Office (ICO) said it doesn’t think its resources would be best spent on UK’s national library, even though it was such a disaster due to MFA not being applied on an admin...Read More
Morphisec recently investigated an incident involving a new variant of one of the most aggressive ransomware families: Mimic version 7.5. First observed in 2022, Mimic remains relatively underreported in the public domain, aside from a detailed analysis of Mimic version 6.3 that was previously published by Cyfirma and Kaspersky. Target Audience: This threat analysis...Read More