B2B cyber security

Ransomware trends: Cybercrime scene in upheaval

11 April 2025

Ransomware: Large players like LockBit and ALPHV/BlackCat are seemingly passé, but new, not yet established groups are moving into the emerging gaps. Ransomware-as-a-Service (RaaS) groups are also revising their internal division of labor and organization. Even states like Russia and North Korea are discovering ransomware as a source of revenue. As a cybercriminal industry, ransomware is subject to constant change. This makes the threat landscape confusing and dangerous. Not only does the top ten extortionist hackers change almost monthly, but individuals or small teams are increasingly playing a growing role. Furthermore, new groups seeking to establish a position in the criminal market are lowering their...

How cybercrime threatens national security

March 13, 2025

| No comments

| Short news

The new Cybercrime Report from the Google Threat Intelligence Group highlights the threat posed to national security by cybercrime. China, Russia, and Iran are using cyberattacks for espionage or to boost their finances. The report highlights how cybercrime has evolved into a destabilizing force threatening national security. In 2024, Mandiant responded to nearly four times more breaches by financially motivated actors than by state-sponsored groups (data from the Mandiant Managed Defense service). The Cybercrime Report reveals how the "Big Four" are using cybercrime as a resource…

Report: Gemini is being abused by state hacker groups

9. February 2025

| No comments

| Short news

The Google Threat Intelligence Group (GTIG) shows in a report that Iranian, Chinese, North Korean and Russian hacker groups in particular are accessing the Gemini AI. Although they do not have malware written, they use AI as a basis for code, to find vulnerabilities and to assist with malicious scripting techniques. The Google Threat Intelligence Group (GTIG) has published a comprehensive report on the use of generative artificial intelligence (AI) by threat actors. Generative AI models such as Gemini are also accessible to attackers. This leads to concerns about the possible misuse of AI for malicious purposes. Important countries in focus...

Cyber espionage: European authorities in the crosshairs – including Germany

6. February 2025

| No comments

| Bitdefender, Short news

Security experts have discovered cyber espionage against European authorities. The attacks may be the work of Russian groups who are also attacking authorities in Germany. They are using compromised Word documents from other authorities to do this. According to current observations by Bitdefender Labs, the APT group UAC-0063 is now increasingly targeting authorities with its cyber espionage, including probably embassies in Europe. Including in Germany, Great Britain, the Netherlands and Romania. The evidence of activities originally aimed at Central Asia and spreading to Central and Western Europe shows the attackers' competence and their flexibility in responding to developing geopolitical tensions....

Study: Much malware comes from state-sponsored attack groups

26 December 2024

| No comments

| PR News

Security provider Netskope has analyzed the malware targeting its customers. The lab found that 66% of attributable malware came from state-sponsored attack groups - primarily from North Korea, followed by Russia and China. New data from Netskope Threat Labs shows that over the past 12 months, 66% of attributable malware targeting Netskope customers was linked to state-sponsored attack groups. The largest share of malware attacks came from North Korean threat groups, with Chinese and Russian groups coming in second and third. Extremely high levels of malware from North Korea...

Cyberattacks: Russia targets German KRITIS

20 November 2024

| No comments

| Stories

Russia is deliberately using destructive malware and threatening critical infrastructure in Germany with its digital warfare. The increasing aggressiveness, particularly illustrated by the GRU's Unit 29155, makes it clear how closely physical and digital warfare are now linked. The GRU's Unit 29155, which is already known for attacks, acts of sabotage and assassinations in Europe, has now also specialized in cyberspace. The Russian unit has significantly expanded its tactics since at least 2020. Information from a community of state organizations such as the Federal Office for the Protection of the Constitution (BfV), the FBI, the CISA and many others...

FBI vs. Star Blizzard: Russian APT group loses 100 domains

7 October 2024

| No comments

| Short news

According to the official announcement of the US Department of Justice, the FBI has severely curtailed the spear phishing efforts of the Russian secret service by seizing 41 Internet domains. Microsoft is taking parallel action against 66 domains. The Russian APT group Star Blizzard is losing more and more parts of its infrastructure. The Department of Justice announced the seizure of 41 Internet domains used by Russian secret service agents and their proxies for computer fraud and abuse in the United States. The department also announced that this was part of the national cybersecurity strategy. The department is also working in parallel with Microsoft to further...

EastWind campaign: China hackers vs. Russian government

August 22, 2024

| No comments

| Short news

It is a somewhat surprising event: Kaspersky has discovered the Chinese hacker group ATP31, which is conducting new CloudSorcerer attacks on government organizations in Russia. However, ATP31 is believed to be controlled by the Chinese government. At the end of July 2024, Kaspersky experts identified an active series of targeted cyberattacks on dozens of computers of Russian government organizations and IT companies. In these attacks, attackers infected devices using phishing emails with attachments containing malicious shortcut files. Clicking on the shortcuts installed malware, which then received commands via the Dropbox cloud storage. Using this software, the attackers downloaded additional Trojans onto infected computers,…

Head of the LockBit gang exposed in Russia

10 Maj 2024

| No comments

| Short news

The British National Crime Agency (NCA), the FBI and other law enforcement agencies have announced the unmasking of the leading head of the LockBit gang. The Russian Dmitry Khoroshev is believed to live south of Moscow. One or "the" leader of what was once the world's most dangerous cybercrime group, LockBit, has been unmasked and sanctioned by the National Crime Agency (NCA) in the UK. Russian citizen Dmitry Khoroshev, also known as LockBitSupp, was the administrator and developer of the LockBit ransomware group. According to various media, the 31-year-old is said to live in the Russian town of Voronesh, about 500 kilometers south of Moscow. The USA invested 10 million...

Day: Russia

Ransomware trends: Cybercrime scene in upheaval

How cybercrime threatens national security

Report: Gemini is being abused by state hacker groups

Cyber espionage: European authorities in the crosshairs – including Germany

Study: Much malware comes from state-sponsored attack groups

Cyberattacks: Russia targets German KRITIS

FBI vs. Star Blizzard: Russian APT group loses 100 domains

EastWind campaign: China hackers vs. Russian government

Head of the LockBit gang exposed in Russia

Which user group do you belong to? (No tracking!)

Important links

Latest Articles & News

It was searched for

Social Media