LATEST

Investigating New INC Ransom Group Activity | Huntress

The Huntress team investigated a ransomware attack of a new INC Ransom threat actor group. Here is the activity we observed.

The Qilin Ransomware: Analysis and Protection Strategies

All you need to know about Qilin ransomware and its operations targeting critical sectors.

The old way: BabLock, new ransomware quietly cruising around Europe, Middle East, and Asia

Group-IB uncovers a new stealthy ransomware strain

Package deal: Malware bundles causing disruption and damage across EMEA

What happens when you combine ransomware with information stealers, remote access Trojans, and other malware in one easy-to-download package?

Using Shodan Images to Hunt Down Ransomware Groups | Huntress

In this blog, we’re going to focus on how Shodan helps us unveil some of the infrastructure that supports ransomware actors.

The Value of Managed EDR for the Modern MSP | Huntress

Our partners at Clear Guidance Partners experienced the value of our EDR capabilities in real-time, pitting them against an active ransomware attack.

Creating macOS Ransomware | Huntress

With the beta release of the Huntress macOS agent, we wanted to share some of the Apple-y stuff we’ve been up to behind the scenes.

Deadbolt ransomware decryption: unlock your data

The Group-IB Incident Response Team investigated an incident related to a DeadBolt attack and analyzed a DeadBolt ransomware sample

Old Gremlins, new methods

Russian-speaking ransomware gang OldGremlin resumes attacks in Russia

Top 5 recommendations for preventing ransomware for 2022

With ransomware attacks on the rise, companies need to take a proactive approach to security. Group-IB has put together a list of actionable tips to help you protect your organization from the ransomware threats in 2022.

Ransomware Canaries: A 2022 Update | Huntress

Read about the exciting new updates to our Ransomware Canaries service.

How Ransomware Works and Why It's a Hacker Favorite | Huntress

Ransomware marks a lucrative business in today’s cyber-driven world. Learn more about ransomware and why it’s a favorite among hackers.

It’s alive!

The story behind the BlackMatter ransomware strain

The Hunt to Find Origins of Kaseya's VSA Mass Ransomware | Huntress

Our Security Researchers discuss how hackers executed the Kaseya VSA supply chain attack—and why the blast radius of the incident was relatively limited.

Experts Weigh in on the State of Email-Based Threats | Huntress

Cybersecurity experts John Hammond and Sébastien Goutal provide insider insight on the current state of phishing, ransomware and email-based attacks.

Huntress VSA Vaccine | Huntress

In this blog, we share details on the vaccine Huntress deployed to our partners to protect them from being infected by the Kaseya VSA ransomware attack.

Rapid Response: Mass MSP Ransomware Incident | Huntress

Huntress is tracking a critical ransomware incident affecting MSPs and their customers, caused by a sophisticated Kaseya VSA supply chain attack.

REvil Twins: Ransomware-as-a-Service program

Deep Dive into Prolific RaaS Affiliates' TTPs

Discovering a Ransomware Remedy in the Wild | Huntress

Our ThreatOps team details stumbling across Raccine, a ransomware remedy that works by hooking onto IFEO debuggers, for the first time.

Cyber Security Insurance Perspective on Ransomware | Huntress

Explore the impact of ransomware on cybersecurity insurance. Learn how insurance providers are adapting and what organizations need to know to stay protected.

BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies

An analysis of the BlackCat ransomware affiliate program

Connecting the Bots

Hancitor fuels Cuba Ransomware Operations

Big Game Hunting: Now in Russia

Top Russian companies and banks under attack from OldGremlin - a group controlling TinyCryptor ransomware

Huntress Service: Ransomware Canaries | Huntress

Read about the value of Huntress' Ransomware Canaries service, a mechanism to deliver faster detection of a ransomware incident.

ATT&CKing ProLock Ransomware

The success of enterprise ransomware attacks has motivated more and more threat actors to join the game.

50 Shades of Ransomware

Security Awareness Training Will Prevent Ransomware | Huntress

Ransomware security awareness training is the most effective way to prevent a ransomware attack against your organization and its employees. Read more in the Huntress Blog to find out how.

Petya starts with Ukraine and then goes global

Group-IB has identified the ransomware that has infected energy, telecommunications and financial companies

Echoes of cyberwar

Why WannaCry was more dangerous than other ransomware?