Weekly Update: 31 January 2023
Ransomware Rewind is a compilation of ransomware-related stories published over the past week.
Most Active Ransomware Operators
Volume of messages posted by operators during the last week.
Significant Campaigns & Incidents
Documents and discussion of significant ransomware campaigns, incidents, and associated actors.
Ransomware group follows through on threat and publishes Okanagan College information (Kelowna)Castanet.net – Jan 30 2023 23:25
Ransomware attack on Indianapolis Housing Agency leaks sensitive info on 200,000 residentsRecord by Recorded Future – Jan 30 2023 22:52
Atlantic General Hospital experiences ransomware eventWMDT ABC-47 – Jan 30 2023 21:56
Stratford University Announces Data Breach as It Closes ShopBitdefender – Jan 30 2023 09:40
Tourism Council plagued by ransomware | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomwareCERT-EU News – Jan 28 2023 17:37
BlackCat Ransomware gang stole secret military data from an industrial explosives manufacturerSecurity Affairs – Jan 27 2023 05:42
Lutheran Social Services of Illinois Announces Data Breach Affecting 184k IndividualsJD Supra – Jan 26 2023 20:43
Mexico-Audrain County Library District Resumes Some Services Following Ransomware Attack – KXEO | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomwareCERT-EU News – Jan 25 2023 19:19
Livingston Memorial VNA Reports Data Breach Following Apparent Ransomware AttackJD Supra – Jan 25 2023 17:48
Riot Games Says Source Code Stolen in Ransomware AttackSecurity Week – Jan 25 2023 10:52
Tactics & Techniques
Discussion and mentions of significant techniques deployed by threat actors.
Cyber criminal groups wooing hackers with seven-figure salaries and holiday payIT Pro UK – Jan 31 2023 12:01
Ransomware Attacks: Why Email Is Still THE Most Common Delivery MethodPhishLabs – Jan 30 2023 15:12
Following the Scent of TrickGate: 6-Year-Old Packer Used to Deploy the Most Wanted MalwareCheck Point Research – Jan 30 2023 10:53
UNC2565 threat actors continue to improve the GOOTLOADER malwareSecurity Affairs – Jan 30 2023 05:48
Copycat Criminals mimicking Lockbit gang in northern EuropeSecurity Affairs – Jan 28 2023 21:58
Most criminal cryptocurrency is funneled through just 5 exchangesArsTechnica – Jan 28 2023 12:15
New Mimic Ransomware Abuses Everything APIs for its Encryption ProcessTrend Micro Simply Security – Jan 26 2023 13:11
Researcher Analysis
Analysis, deep-dives and reverse engineering.
SEKOIA[.]IO Ransomware Threat Landscape – second-half 2022Sekoia Blog – Jan 31 2023 12:45
Assm ransomware will encrypt personal filesMedium Cybersecurity – Jan 30 2023 14:54
Schools Are A Rising Target For Ransomware AttacksInformation Security Buzz – Jan 30 2023 14:27
Targets of Opportunity: How Ransomware Groups Find VictimsGovInfoSecurity.com – Jan 27 2023 20:07
Orange Cyberdefense Security Navigator 2023: cyber-extortion dominatesOrange Business Services – Jan 27 2023 17:48
Top 10 Active Ransomware Gangs: Geopolitics, Origin and TargetsMedium Cybersecurity – Jan 27 2023 11:21
GuidePoint Research and Intelligence Team’s (GRIT) 2022 Ransomware Report Highlights the Amount of Threat Group RebrandingYahoo! News – Jan 26 2023 11:03
Ransomware Spotlight: MagniberTrend Micro Security News – Jan 26 2023 10:20
Legal Actions and Discussion
Actions, consequences, and policy discussion by governments and organisations.
Lack of physical loss in ransomware attack raises insurance concerns after court rulingSC Magazine US – Jan 30 2023 19:15
Should ransomware payments be made illegal?SC Magazine UK – Jan 30 2023 18:53
After AIIMS ransomware attack, Modi govt’s building a task force to fight cyber espionageThePrint – Jan 27 2023 12:30
Ransomware fears, regulatory requirements drive threat intelligence interestSC Magazine US – Jan 27 2023 03:06
US offers $10M bounty for Hive ransomware links to foreign governmentsBleepingComputer.com – Jan 26 2023 20:41
New Ransomware Payment Reporting Requirements on HorizonSecurity Boulevard – Jan 26 2023 13:00
U.S. Department of Justice Disrupts Hive Ransomware VariantUnited States Department of Justice – Jan 26 2023 05:00
The content in this report was compiled by the use of our award-winning intelligence product Silobreaker Online. Silobreaker cannot guarantee the accuracy, completeness, integrity or quality of any content in this report and no responsibility is accepted by Silobreaker in respect of such content. Readers must determine for themselves what reliance they should place on the compiled content in the report.
