New Metastealer Malvertising Campaigns
MetaStealer is a popular piece of malware that came out in 2022, levering previous code base from RedLine. Stealers have...
OSINT
Ransomware Review January 2024
This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on...
Atomic Stealer Rings In The New Year With Updated Version
Last year, we documented malware distribution campaigns both via malvertising and compromised sites delivering Atomic Stealer (AMOS) onto Mac users....
Pikabot Distributed Via Malicious Ads
During this past year, we have seen an increase in the use of malicious ads (malvertising) and specifically those via...
Ransomware Review February 2024
This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on...
Nitrogen Shelling Malware From Hacked Sites
Nitrogen is the name given to a campaign and associated malware that have been distributed via malicious search ads. Its...
Malicious Ads For Restricted Messaging Applications Target Chinese Users
An ongoing campaign of malicious ads has been targeting Chinese-speaking users with lures for popular messaging applications such as Telegram...
2024 State Of Ransomware In Education 92 Spike In K 12 Attacks
This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on...
Ransomware In 2023 Recap 5 Key Takeaways
This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on...
Sliver C2 Detected – 104[.]237[.]233[.]114:31337
The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...
Sliver C2 Detected – 23[.]254[.]204[.]15:31337
The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...
Sliver C2 Detected – 135[.]181[.]25[.]255:31337
The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...
Sliver C2 Detected – 45[.]95[.]187[.]235:31337
The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...
Akira Ransomware Victim: Sanok Rubber Company Spólka Akcyjna
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: United Africa Group Ltd[.]
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: Owens Group
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: InstantWhip
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: Crystal Lake Health Center
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: R[.]C[.] Moore Trucking
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: Gunning & LaFazia, Inc[.]
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: Lincoln Office
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: DrilMaco
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: Lancaster County Sheriff’s Office
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
Hunters International Ransomware Victim: Fred Hutchinson Cancer Research Center
NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...
