TA505

New Ransom Payment Schemes Target Executives, Telemedicine
Ransomware groups are constantly devising new methods for infecting victims and convincing them to pay up, but a couple of strategies tested recently seem especially devious. The first centers on targeting healthcare ...

Ransomware Gangs and the Name Game Distraction
It's nice when ransomware gangs have their bitcoin stolen, malware servers shut down, or are otherwise forced to disband. We hang on to these occasional victories because history tells us that most ...

Using Qiling Framework to Unpack TA505 packed samples
Table of Contents Introduction TA505 Packer Qiling Framework Proof of Concept IOC Conclusion References Introduction Threat Actors make use of packers when distributing their malware as they remain an effective ...

Dutch university pays $220,000 ransom to infamous Russian cybercrime ring
The University of Maastricht in Holland has ended up paying a $220,000 ransom to a group of Russian hackers after an unwary employee fell for a phishing scam. The university was attacked ...
Cyber Security Roundup for November 2018
One of the largest data breaches in history was announced by Marriott Hotels at the end of November. A hack was said to have compromised up to a mind-blowing "half a Billion" ...