Posts

Showing posts with the label Ransomware attack

Hackers Used Nasty Python RAT, PyXie to deliver Ransomware

Image
The cyber security researchers at Blackberry Cylance recently discovered a highly sophisticated hacking campaign targeting educational & healthcare organizations. The operation behind this attack was previously unknown; however, it has been named as PyXie by the researchers. According to the tech reports, PyXie first surfaced to lime-light in year 2018. It remained under the radar of the cyber security industry until December 2019. Python RAT or PyXie is a Python based Trojan that is currently being employed in a hacking operation by cyber criminals. This nasty malware gives the attackers illicit access to Windows based systems, thus enabling them to monitor the activities of targeted system & steal sensitive information of the user. Detailed analysis conducted by the researchers reveals that Python RAT is working in conjunction with Cobalt Strike beacons & a downloader. It also bears behavioral similarities to a pernicious Banking Trojan named...

How to remove scarab ransomware- Virus Removal Guide

Image
Guide to Remove Scarab Ransomware  Ransomware attacks have grown to be one of the major problems on the web. In the recent past, Ransomware features have expanded to include data exfiltration, participation in distributed denial of service attacks (DDOS) & anti-detection components. Recently a series of Scarab Ransomware variants were released that dominated Ransomware distribution. The malicious program employs sophisticated AES-256 & RSA-2018 encryption algorithm to lock personal information on targeted systems. The Ransomware belongs to hidden tear Ransomware family. Scarab Ransomware was spotted for the first time in June 2017 & since then has been reappearing with new versions. Amongst the many variants of this Ransomware the updated ones encrypt files by appending it with .RAP, .zzzzzzzz, .krab, .fast, .key, .ERROR, .skype, .hitler, .mammon, .walker, .please, .Recovery, .red, .osk, .dan@cock.email, .bomber etc. The list of scarab ...

Anonymous Ransomware haunts China – Large Spread Infections!

Image
China deemed as a prodigy of technological outbreaks encountered unprecedented number of major cyber threats in last few years. Since the extensive destructive days of  WannaCry  and  NotPeyta  last year, ransomware attacks appeared to have dwindled heaving a sigh of relief among security researchers. A recent discovery of this distinctive cyber attack targeting China got the cyber security back to work. Unlike almost every ransomware malware that seek for ransom payments in Bitcoin, this ransomware virus demands for ransom through one of the country’s most popular payment methods.   WeChat Pay , one of  China’s most commonly used digital wallets , owned by Chinese tech giant  Tencent , was used by attacker to receive payments.   Threat Behavior This anonymous ransomware after infiltrating the system encrypts user’s files using a less secure  XOR cipher . However, the ransom note claims to have used a more sophisticated  DES encr...

Shipping Company COSCO hit by ransomware attack at its American Network

Image
COSCO Shipping Company’s communication networks taken Offline Shipping Company  COSCO was hit by a ransomware infection  that left its  American networks crippled . The company had to take its other networks temporarily offline as a precautionary measure The company issued an official press release that stated that its local email and telephone networks were unable to work properly at the time due to local American network breakdown. It was not clear as to what the issue was that led to an operations shutdown at the American network of the COSCO Shipping network. Some maritime news websites contained information that the system breakdown or the operations shutdown was implemented due to a Ransomware infection that had infected some of the systems. The  source of this news was from the internal emails of COSCO  as seen by some maritime news sites. COSCO Shipping Network is taking Contingency Steps The  press release of 25 July 2018 from COSCO S...