The threat actor, formed in 2023, specializes in ransomware attacks targeting Russian government organizations. It encrypts and deletes victim data, exfiltrates sensitive information, and aims to inflict maximum damage on critical assets. The threat actor likely scans IP address ranges in Russia to identify VPN servers and applications accessible from the internet that could serve […]
The post TWELVE Threat Attacks Windows To Encrypt Then Deleting Victims’ Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Runtime environments offer a flexible way to customize Automation Account Runbooks with specific packages. While base system-generated environments can’t be directly modified, they can be indirectly changed by adding packages to the old experience and then switching to the new Runtime Environments feature. It could potentially be exploited by attackers who create new runtime environments […]
The post Researchers Backdoored Azure Automation Account Packages And Runtime Environments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
The RomCom malware family, particularly its SnipBot variant, has evolved into a sophisticated threat capable of ransomware, extortion, and targeted credential gathering. It employs various attack methods, including PDF-based downloaders and executable payloads, to compromise victim systems. The threat actors behind RomCom have been active since at least 2022 and utilize stolen or fraudulently obtained […]
The post Hackers Weaponizing PDF files To Deliver New SnipBot Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.