News

Latest news about B2B cyber security >>> PR agencies: add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

Building materials manufacturer Knauf continues to suffer from ransomware attack
B2B Cyber ​​Security ShortNews

The Bavarian building materials manufacturer Knauf reported a ransomware attack on its systems on June 29. The effects of the cyber attack seem to continue to preoccupy the company. Knauf reports very transparently on its website about the incident. Building materials manufacturer Knauf was also unable to defend itself against a cyber attack. On its website, the company reports very transparently to its customers on the current state of affairs. In the first message, customers were informed as follows: Open communication to customers "In the interests of trusting and transparent cooperation, we would like to inform you that our systems in the...

Read more

Key technologies against ransomware
Key technologies against ransomware

Ransomware is a chronic threat. But their appearance is constantly changing. On the one hand, behind the permanent change there is a scene that is becoming more and more professional, thinks more economically or even politicizes itself in the current crisis. On the other hand, there are new technologies. Here Bitdefender shows four pillars for defending against extortion attacks. An effective defense must set up itself accordingly in depth and ward off the extortionate attacks in the various phases. The current Bitdefender Threat Report, which takes into account the telemetry data from the previous month, shows for the month of May 2022 how active…

Read more

FBI and CISA warn about MedusaLocker ransomware
B2B Cyber ​​Security ShortNews

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), the Department of the Treasury and the Financial Crimes Enforcement Network (FinCEN) have issued warnings about MedusaLocker ransomware. MedusaLocker actors, first observed in May 2022, overwhelmingly rely on Remote Desktop Protocol (RDP) vulnerabilities to access victims' networks. The MedusaLocker actors encrypt the victim's data and leave a ransom note with communication instructions in each folder with encrypted files. The note instructs victims of the ransomware to make payments to a specific Bitcoin wallet address. Based on the…

Read more

Ransomware guide to current techniques and methods

In an open letter, a group of professors from the field of IT security call on the federal government to implement more measures against encryption software, so-called ransomware. For companies that have not yet been affected by a ransomware attack, on the other hand, only 67 percent would be willing to do so in principle...

Read more

Conti, LockBit, Black Basta, ALPHV & Co: Ransomware Report

Malwarebytes has compiled a report on ransomware for May 2022. Conti, LockBit & Co. are also there. Unfortunately, newcomers such as BlackBasta and ALPHV are also becoming more and more successful with their attacks. With 73 ransomware attacks, LockBit was by far the most widespread ransomware in May 2022 according to the analysis of the Malwarebytes Threat Intelligence Team. This was followed by Black Basta with 22 attacks, ALPHV with 15 attacks, Hive with 14 attacks and Mindware with 13 attacks. Conti, on the other hand, only finished sixth in May – Malwarebytes wrote to the ransomware group…

Read more

Ransom payments climb to almost $1 million on average
B2B Cyber ​​Security ShortNews

Palo Alto Networks Reports Average Ransomware Ransom Payments Up 71% This Year, Nearing $1 Million. Palo Alto Networks has observed and currently evaluated the current development of real paid ransom demands after ransomware attacks. As thousands of cybersecurity professionals gather in San Francisco for the annual RSA conference, it's a good time to take a quick look at the ransomware activity Palo Alto Networks has observed so far in 2022. On average, companies pay $925.162 The numbers are staggering: The average ransomware payment in cases managed by Unit…

Read more

Ransomware: Every 2nd company attacked in the first half of the year
Ransomware: Every 2nd company attacked in the first half of the year

A Cohesity study shows that almost half of companies have been attacked by ransomware in the last six months. A lack of collaboration between IT and security teams makes organizations more vulnerable to cyber threats. Many companies are more susceptible to cyber attacks such as ransomware attacks because IT and security officers (SecOps) work poorly together. This is shown by a study by Cohesity, a leading provider of data management solutions. Most IT and security decision-makers are convinced that both teams should share responsibility for their company's holistic data security strategy - i.e. from the prevention of cyber attacks to backup...

Read more

Conti ransomware: 40 organizations hacked in one month
B2B Cyber ​​Security ShortNews

As BleepingComputer reports, Conti's cybercrime syndicate is powering one of the most aggressive ransomware operations and is so well organized that they and partners were able to hack more than 40 companies in just over a month. Security researchers codenamed the hacking campaign ARMattack and described it as one of the "most prolific" and "extremely effective" of the group. ARMattack Campaign In a report shared with BleepingComputer, researchers at cybersecurity firm Group-IB say that one of Conti's "most productive campaigns" of the past year took place between November 17 and December 20, 2021. They discovered the months-long hacking spree of…

Read more

Ransomware & OneDrive: Attackers delete version backups

Proofpoint has discovered potentially dangerous Microsoft Office 365 features that attackers use to delete recovery version files stored on SharePoint and OneDrive in order to more easily blackmail victims. Ransomware attacks traditionally target data across endpoints or network drives. Until now, IT and security teams have believed that cloud drives are more resilient to ransomware attacks. After all, the now well-known “AutoSave” feature, along with versioning and the good old recycle bin for files as a backup, should have sufficed. But that might not be the case for much longer. Vulnerability in Microsoft 365 and OneDrive Proofpoint…

Read more

ALPHV Group: Service website for robbed companies 
B2B Cyber ​​Security ShortNews

The ALPHV ransomware gang, known as BlackCat, provides a special website for its victims: victims can check if their data was stolen in an attack or if they are just victims of encryption. They want to increase the pressure so that the victim pays. Most ransomware groups have started their attacks not only by encrypting the data, but also by copying and transporting significant amounts of data. The extortion is thus extended so that the data not only remains encrypted when "not paying", but the stolen data is also simply sold on the Darknet...

Read more