New Rorschach ransomware almost twice as fast as LockBit
The sophisticated strain is made of cherry-picked code from other leading lockers and operated by an unknown group
Source: itpro.co.uk
📰 Windows Domain Controller News
Windows Domain Controller News Today
Fast, Ad-Free News Updates
Stay updated with breaking news from Windows Domain Controller. Real-time updates on events, politics, business and more.
'Rorschach' threat shirks normal tactics, boasts rapid ransomware encryption
Perhaps even more notable than its fast ransomware encryption speeds is the Rorschach variant’s ability to evade detection using highly unusual, and effective, threat tactics.
Source: scmagazine.com
New ransomware strain believed to be fastest at executing encryption
A new strain of ransomware believed to be the fastest-executing encryption malware has been discovered. Researchers at Check Point Software said today the strain, dubbed Rorschach, hit an unnamed U.S. company using a signed component of Palo Alto Networks' Cortex XDR Dump Service Tool, version 7.3.0.16740. The Rorschach ransomware employs a highly effective and fast
Krasnodarskiy Kray Service Tool Researchers At Check Point Software Palo Alto Network Cortex Check Point Software Windows Domain Controller
Source: itworldcanada.com
Malware authors leverage more attack techniques that enable lateral movement
Malware authors and cybercriminal groups are making sophisticated techniques practical for threat actors to use more widely, changing threat models.
Virtual Network Computing Remote Services Security Authority Subsystem Service Lateral Movement Softperfect Network Scanner Security Authority
Source: reseller.co.nz
Malware authors leverage more attack techniques that enable lateral movement
Malware authors and cybercriminal groups are making sophisticated techniques practical for threat actors to use more widely, changing threat models.
Virtual Network Computing Remote Services Security Authority Subsystem Service Lateral Movement Softperfect Network Scanner Security Authority
Source: csoonline.com
The forensic analysis of a ransomware attack [Q&A]
A ransomware attack can be devastating for businesses. But while in the aftermath of an attack the focus will be on recovery, its also important to look at how the attack happened and what information can be gleaned to help prevent future incidents.
Source: betanews.com