In a striking departure from their previous focus on Latin American and European organizations, the HiatusRAT malware campaign has taken a notable shift in tactics, now directing its attention towards a reconnaissance attack on a server within the U.S. Department of Defense.
The Knight ransomware has adopted a deceptive guise by orchestrating an ongoing spam campaign that cleverly poses as TripAdvisor complaints. This intricate ploy conceals its malicious intent, with the ransomware itself being a revamped version of the Cyclop Ransomware-as-a-Service. The re-branding took place at the close of July 2023, marking a shift from its previous identity.
In the realm of cyber security, ransomware remains a persistent and evolving threat, wreaking havoc on organizations and individuals alike. Microsoft's recent revelations about the BlackCat ransomware's latest version, the Sphynx ransomware, illuminate the ever-advancing tactics employed by cyber criminals
In February of this year, the emergence of DoDo ransomware was initially reported. This ransomware variant is a spinoff from the widely recognized Chaos ransomware that has been extensively studied. Despite its connection to Chaos, DoDo ransomware isn't classified as a novel strain.
Monti represents a relatively new form of ransomware that targets Linux systems, encrypting their files and appending a ".puuuk" extension to them. There have been indications of potential Monti variations that are effective on Windows systems as well.