🌟New report out today!🌟
Fake Zoom Ends in BlackSuit Ransomware
Analysis and reporting completed by @pigerlin, UC1 and @Miixxedup
Audio: Available on Spotify, Apple, YouTube and more!
https://t.co/r9hQxzPTL0
🌟New report out today!🌟
Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware
Analysis & reporting completed by @r3nzsec, @MyDFIR & @MittenSec.
Audio: Available on Spotify, Apple, YouTube and more!
https://t.co/ZbEwbuiofg
I'm still bitter about Claude banning my account at first because I asked it some specific cybersecurity questions, but man it's really good at writing and crafting almost perfect responses when my brain has already turned off for the day.
Skip this post if you don't feel like getting irritated and/or frustrated and/or angry.
July 18th, 2024 Columbus, Ohio was a victim of Rhysida ransomware group — a group believed to be related to the now 'forked' and defunct Conti ransomware group.
August 8th, 2024 Rhysida ransomware group began slowly releasing the 6TB of exfiltrated Columbus, Ohio government data onto their Tor domain. As time progressed, it was evident the city of Columbus, Ohio were unlikely to pay the $1,600,000 Rhysida ransomware group wanted.
Columbus Mayor Andrew Ginther stated to local media outlets that Rhysida has unsuccessfully exfiltrated data and they successfully stopped the attack. Subsequently, a cybersecurity researcher operating under the moniker 'Connor Goodwolf', refuted the mayors statements — essentially acting as a whistleblower.
Connor Goodwolf spoke with Columbus, Ohio media outlets regarding the Rhysida ransomware group attack, proving Rhysida has not only successfully compromised the local government, but also exfiltrated sensitive information on residents of Columbus, Ohio. This information included social security numbers of police officers, people who are victims of domestic violence, etc.
Mayor Andrew Ginther decided to have the City of Columbus, Ohio sue Connor Goodwolf. Additionally, the city is seeking a restraining order against Goodwolf, making it a crime to disclose more information on the Rhysida breach, and requesting a permanent injunction against Connor Goodwolf. The lawsuit against Connor Goodwolf states Mr. Goodwolf places the community in danger stating he is spreading stolen data which is illegal. The lawsuit continues to say 'nobody' had access to the exfiltrated Rhysida ransomware group data because it was published in a manner where access was difficult to achieve.
Wild West Hackin’ Fest is taking its conference to new heights in 2025! Join us in Denver for Wild West Hackin’ Fest @ Mile High 2025! Pre-con training: Feb. 4-5, 2025 and conference: Feb. 5-7, 2025.
Register now! ➡ https://t.co/teZY5w5Vlw
1/2
FBI seizes websites for Dispossessor ransomware operation who claimed to be ex-LockBit affiliates.
While starting as a data extortion group, they later used the leaked LockBit encryptor in attacks.
Learn more: https://t.co/IA72XeByja
Interesting case I came across . Veeam filed a civil suit against a former employee accusing them of breach of contract for recruiting people from Veeam to work at Huntress Labs. They included this little jab lol
In case you missed it, I was on @wamu885 's @1a this morning with @JWhitePubRadio to talk about the latest news about @binance's Tigran Gambaryan. He's on trial in Nigeria and has been held by the government there since February. Listen to the latest here: https://t.co/4tCzisOPGg