Expert Insights
Ransomware Cuba
The Cuba Ransomware targets the Windows operating system. It was discovered by Ravi, an American Ransomware hunter. His attacks are carried out through email campaigns. The emails contain a link to “subscribe” to a service document, the malware is delivered via this macro-loaded Word document, which contains a Hancitor payload, which is downloaded and opened. Hancitor is a downloader that
Ransomware LV
LV ransomware has its code structure based on the structure of the REvil Sodinokibi ransomware, which was the tormentor of numerous companies after a wave of attacks in the United States. After these attacks, the REvil group ceased its activities because of the attention its attacks received from the U.S. government. It is unclear whether the group passed its code
Ransomware Prometheus
The Prometheus ransomware first appeared in February 2021, the FBI issued an alert about it. It is a variant of the Thanos ransomware and claims to be an extension of the REvil Sodinokibi group, but there is no concrete evidence of a link between the two groups. This tactic is used by newly created groups that do not yet have
Ransomware HiveLeaks
A series of attacks by the HiveLeaks ransomware has garnered attention around the world, the FBI has issued a flash alert on attacks by this group. This extension is relatively new, their first appearance was in June 2021, they made a successful attack on Altus Group, a commercial real estate software development company, the amount requested for the ransom was
Ransomware Vice Society
The Vice Society ransomware attacks led to an update to the Windows print spooler code. The port the group used for their attacks was known as “PrintNightmare” the Windows update aimed to close this port. This flaw was in the printing system, after failing to execute the Spooler the hackers could access the operating system which granted them the same
Ransomware Conti
In May of this year, the FBI released an alert about the considerable increase in attacks carried out by the Conti Ransomware. They use the RaaS (Ransomware as a Service), which is a way of outsourcing the spread of this ransomware, amplifying the number of attacks exponentially. They are evolving this type of service, instead of paying just a commission
