Advanced Threats August 17, 2021

Analysis of Diavol ransomware reveals possible link to TrickBot gang

7 min read - Ransomware has become the number one cyber threat to organizations, making up nearly 25% of attacks IBM X-Force Incident Response remediated in 2020. Ransomware is making headlines on a regular basis due to the high impact of certain attacks on…

Software Vulnerabilities July 29, 2021

July 2021 Security Intelligence Roundup: Ransomware, Security by Design and How to Analyze in Windows With Frida

3 min read - Getting and staying ahead of threat actors means knowing the cybersecurity landscape. Today, that still often means ransomware and changing the ways and places we work. July’s top stories include a supply chain attack from the REvil ransomware gang and…

Incident Response July 26, 2021

Double Encryption: When Ransomware Recovery Gets Complicated

4 min read - Ever hear of double extortion? It’s a technique increasingly employed by ransomware attackers. A malware payload steals a victim’s plaintext information before launching its encryption routine. Those operating the ransomware then go on to demand two ransoms — one for…

Incident Response July 21, 2021

This chat is being recorded: Egregor ransomware negotiations uncovered

8 min read - Ransomware attacks are topping the charts as the most common attack type to target organizations with a constant drumbeat of attacks impacting industries across the board. In fact, IBM Security X-Force has seen a more than 10% increase in ransomware…

Advanced Threats July 16, 2021

Cyber Insurers Might Be Making the Ransomware Problem Worse

4 min read - In mid-May, one of the largest insurance companies in the U.S. paid $40 million to ransomware attackers. Two people familiar with the matter told Bloomberg that the malicious actors stole an undisclosed quantity of data and then effectively locked the…