June 2021

Lorenz Ransomware Decryptor Recovers Victims’ Files For Free Dutch cybersecurity firm Tesorion has released a free decryptor for the Lorenz ransomware, allowing victims to recover some of their files for free without paying a ransom. Lorenz is a human-operated ransomware that began operating in April 2021 and has since listed twelve victims Read more…

Hackers Use Zero-day to Mass-wipe My Book Live Devices A zero-day vulnerability in Western Digital My Book Live NAS devices allowed a threat actor to perform mass-factory resets of devices last week, leading to data loss. Last week, we broke the story that Western Digital My Book Live NAS owners suddenly discovered Read more…

Russian Hackers Had Months-long Access to Denmark’s Central Bank Russian state hackers compromised Denmark’s central bank (Danmarks Nationalbank) and planted malware that gave them access to the network for more than half a year without being detected. The breach was part of the SolarWinds cyber espionage campaign last year that the U.S. attributed Read more…

DoubleVPN Servers, Logs, and Account Info Seized By Law Enforcement aw enforcement has seized the servers and customer logs for DoubleVPN, a double-encryption service commonly used by threat actors to evade detection while performing malicious activities. DoubleVPN is a Russian-based VPN service that double-encrypts data sent through their service. When Read more…

REvil Ransomware’s New Linux Encryptor Targets ESXi Virtual Machines The REvil ransomware operation is now using a Linux encryptor that targets and encrypts Vmware ESXi virtual machines. With the enterprise moving to virtual machines for easier backups, device management, and efficient use of resources, ransomware gangs increasingly create their own Read more…

Ransomware Gangs Now Creating Websites to Recruit Affiliates Ever since two prominent Russian-speaking cybercrime forums banned ransomware-related topics [1, 2], criminal operations have been forced to promote their service through alternative methods. At least two ransomware gangs in need of hackers to run the attacks have been using their sites to Read more…