How the world’s worst ransomware gang avoids detection
Look at a real example of how LockBit used LOTL techniques on a ThreatDown MDR client.
4 minutes
ransomware
South Africa’s NHLS is recovering from a ransomware attack quickly, it just doesn’t feel that way
It's estimated that the NHLS handles diagnostic tests for about 80% of South Africa's population. Ransomware groups don't care.
2 minutes
Alabama State Department of Education stops ransomware attack but the assault on US education continues
More than 60% of global ransomware attacks on education happen in the USA.
2 minutes
Ransomware increases hospital deaths significantly
New research shows that you don't want to be in a hospital when ransomware strikes.
1 minute
Upgrade now! New MOVEit Transfer vulnerability under active exploitation
A new vulnerability in MOVEit Transfer is already under active exploitation, just a day after a patch was released.
2 minutes
From weeks to hours: Why ransomware attacks are getting quicker
Businesses will need to adapt as ransomware gangs take less time to steal and encrypt data than ever before.
4 minutes
Black Basta ransomware exploits Windows Error Reporting Service vulnerability
Researchers have found an exploit tool using an elevation of privilege vulnerability to drop Black Basta ransomware.
2 minutes
Ransomware review: June 2024, a year-high 470 attacks recorded
In May, we recorded a total of 470 known ransomware attacks, including some sickening attacks on healthcare.
4 minutes
Ransomware drives healthcare provider into administration
Australian e-prescription provider MediSecure has entered voluntary administration following a cyberattack.
1 minute
Ransomware has a new driver: zero-day exploits
Read on to find out how ransomware gangs are using zero-days, and what your organization can do to stop them.
14 minutes
North Korean threat actor behind new ransomware
A relatively new group of North Korean cybercriminals has been found deploying FakePenny ransomware.
2 minutes
140 Ascension facilities still reeling from ransomware attack
140 Ascension healthcare units have been disrupted by the Black Basta ransomware group.
1 minute
Black Basta ransomware affiliates use Quick Assist to target users
Cybercriminals are using the Quick Assist remote assistance tool to deliver ransomware.
1 minute
London Drugs closes retail stores after ransomware attack
Canadian pharmacy retail giant London Drugs is reeling from a cyberattack.
2 minutes
CISA pilot has sent 2,000 alerts to organizations at risk of ransomware
CISA director Jen Easterly said the agency’s automated vulnerability warning program will be ready for full deployment by the end…
1 minute
Patch now! Cactus exploits Qlik Sense to deliver ransomware
Researchers say the Cactus ransomware group is exploiting vulnerabilities in Qlik Sense.
1 minute
K-12 district hit with $500k Medusa ransomware attack
The Medusa ransomware gang claims it has stolen 1.2 TB of data from a large K-12 district.
1 minute
Turning back the clock on encryption: How to perform ransomware backups in one-click
The ThreatDown EDR Ransomware Rollback feature has been updated to extend the max recovery window from 72 hours to 7…
3 minutes
Ransomware review: March 2024
February 2024 is likely to be remembered as one of the most turbulent months in ransomware history.
7 minutes
Sign up to get the latest threat intelligence.
Subscribe to newsletterThreatDown is ranked as a leader in EDR + MDR by G2
