Expert Insights

The Holy Ghost Ransomware is an organization that has been operating since June 2021, carrying out small-scale double extortion attacks. Its method consists of stealing information and threatening to expose it on its TOR domain. According to the researchers, the group chooses not to attack large institutions that require time and complex strategies. But they aim to conduct smaller operations

The OldGremlin ransomware started its activities around March 2020. Although apparently Russian-speaking, OldGremlin ransomware primarily targets Russian institutions such as national banks, private companies in the industrial or medical fields. According to Oleg Skulkin, a forensic analyst at Group-IB, the perpetrators of these attacks are the only Russian-speaking ransomware operators to violate the dictated rule about not working in Russia

Ransomware attacks have been on the rise these past few years and new ransomware often emerges. This July, it was the case with the Rever ransomware that has some important characteristics. The main target of Rever ransomware is Synology NAS and Windows Server systems. After breaking in, most often done via unprotected RDP or malicious emails, the attackers encrypt the

The CryptOn ransomware was discovered around 2017. Since then, it has had varying nomenclatures, such as Cry9, CRY36, Cry128, Nemesis or X3M. CryptOn is part of the CryptoLocker ransomware family. CryptOn steals and encrypts the victim’s data. In this way the group applies double extortion, which consists of threatening the victim with the publication of the data if the ransom

We know that the OnePercent ransomware has been active in the cyber world since late 2020. Based on Ransomware as a Service (RaaS) operations, the group behind the OnePercent ransomware has been targeting attacks on various companies around the world and largely in the United States. Like many other ransomware, OnePercent usually encrypts a company’s data, threatening to release or

Boss is a newly discovered ransomware extension, but the group tends to grow rapidly due to its RaaS (Ransomware as a Service) strategy. The RaaS tactic has become a widely used method by hackers because it allows them to market the ransomware to anyone. Resulting in the greatest profit and spread of criminal operations. Boss brings a peculiar feature in