In this article, we will analyze LockBit 3.0 ransomware attack cases to show you how attacks similar to these cases can be prevented.



What is LockBit 3.0 Ransomware?



LockBit 3.0 (also known as LockBit Black) is ransomware created by the cybercrime syndicate…

For over 10 years, security researchers have been observing and keeping tabs of APT group Earth Aughisky’s malware families and the connections, including previously documented malware that have yet to be attributed.

A simple tool for detecting memory modifications to Windows API. - ytk2128/api-monitor32

Read the ransomware trends for 2022 - UK has 5% of total attacks shifting just 0.1% YOY. Read our full report

Kaspersky researchers detected OnionPoison campaign: malicious Tor Browser installer spreading through a popular YouTube channel and targeting Chinese users.

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods - optiv/Freeze

In the second part of our Water Labbu blog series, we explore how the threat actor exploits Electron-based applications using Cobalt Strike to deploy backdoors.

Aftermath is a free macOS IR framework. Contribute to jamf/aftermath development by creating an account on GitHub.

In this blog, we will give the required background for understanding the vulnerability and the detection logic that Microsoft Defender for Identity uses to...

In a Cybersecurity Advisory released today, the National Security Agency (NSA), the Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Bureau of Investigation (FBI) exposed the

Understanding which PyYAML API versions are vulnerable with a testing matrix

We looked at the number of affected ATMs and PoS terminals, geography of attacks and threat families used by cybercriminals to target victims in 2020-2022.

The malicious version of YoWhatsApp messenger, containing Triada trojan, was spreading through ads in the popular Snaptube app and the Vidmate app's internal store.

Having been in IT longer than I care to remember, one issue keeps coming up. It doesn’t matter how well you have implemented <insert security mechanism> what really matters is...

The malicious version of YoWhatsApp messenger, containing Triada trojan, was spreading through ads in the popular Snaptube app and the Vidmate app's internal store.

Keep your JavaScript code secure and compliant with Sandworm - Sandworm

On a recent engagement I found myself testing a Kubernetes environment. Through application-level bugs I had gotten remote shell access to some of its containers. For further exploration and analysis…