Säkerhetsrapport
en gång i månaden

Insikter från cyberhotslandskapet från WithSecure Threat Intelligence-teamet. Ny rapport i början av varje månad.

Läs rapporten

Ransomware: Trends and notable reports
- Quantum Locker targets Cloud
- EnvironmentsThe Rise of Royal
- RansomwareBlackBasta linked to
- FIN7 Threat Actor
- US Govt issue HIVE ransomware advisory
Other notable highlights in brief
- DTrack activity targeting Europe and Latin America
- Emotet botnet operational after 5-month hiatus
- ProxyNotShell Exchange Exploits Available
- OpenSSL Vulnerability Downgraded
Threat Data highlights
Research highlights
- DUCKTAIL, continued
- Machine learning accuracy forecast
Detection and response highlights

Läs rapporten

Monthly highlights
- Military targets attacked
- Fortinet vulnerability under active attack
Ransomware: Trends and notable reports
- Automobile dealer group Pendragon held to $60m ransom
- “Prestige” ransomware hits Poland and Ukraine
- BlackByte abuse vulnerable drivers to bypass securit
Other notable highlights in brief
- GitHub rife with malicious code
- Two new Microsoft Exchange vulnerabilities being actively exploited
- FBI issue Iran hack-and-leak warning
- LinkedIn addresses fake profiles
- Abusing Chromium’s application mode to phish
- Healthcare sector report on commonly abused tools
- Joint report outlines top vulnerabilities exploited by China
- Zimbra vulnerability widely exploited
Threat data highlights
Detection and response highlights

Läs rapporten

Läs rapporten

Top malware strains 2021
Mailchimp and Twilio incidents highlight the supply chain issue
State-backed actors target Confluence vulnerability
Microsoft disrupt Callisto Group
Ransomware: Trends and notable reports
- ENISA’s ransomware threat landscape
- A history lesson on Ransomware
- A look at Initial Access Brokers
- Newcomers: SolidBit
Other notable highlights in brief
Research highlights: WithSecure™ ransomware threat update

Läs rapporten

Trickbot group attack Ukraine
Brute Ratel being abused by threat actors
Black Basta on the rise
Ransomware: Trends and notable reports
- BlackCat under the spotlight
- Vice Society
- A closer look at LockBit 3.0
- Hive joins BlackCat in using Rust
- CISA produce alert on MedusaLocker
- HavanaCrypt, a new group with novel tactics
- Q2 statistics from Digital Shadows
Other notable highlights in brief
Threat data highlights
Research highlights: Ducktail: An infostealer malware targeting Facebook business accounts

Läs rapporten

Läs rapporten

Advisory on initial access techniques
Emotet back at full power
BPFDoor, an insidious backdoor
Ransomware: Trends and notable reports:
- Is this the end of Conti?
- Iran is carrying out ransomware attacks
- Operator of Thanos builder charged
- The return of REvil?
Other notable highlights in brief

Läs rapporten

Läs rapporten

Läs rapporten

RUSSIA-UKRAINE CONFLICT: Related cyber activity
SANDWORM: Using new malware Cyclops Blink
KARAKURT: A threat actor focused on extortion
DAXIN: A Chinese-linked espionage tool
RANSOMWARE: Trends and Notable Reports
- Recovery of data encrypted by Hive ransomware
- Joint advisory on ransomware
- CONTI Leaks
Other Notable Highlights in Brief

Läs rapporten

UKRAINE: Defacements and WhisperGate Wiper
CISA: Russian Nation State Threats
Log4j: A Pervasive Library Vulnerability
SYSJOKER: New Backdoor Targets Windows, Mac and Linux
EARTHLUSCA: Financially Motivated Chinese Threat Actor
RANSOMWARE: Trends and Notable Reports
- REvil Associates Arrested
- Europol shutdown VPN Labservers
- Other Ransomware Group Insights
Other Notable Highlights in Brief

Läs rapporten

IRANIAN ACTORS: Evolving Trends
DEV-0322: ManageEngine Exploitation
RANSOMWARE: Trends and Notable Reports
- Targeting Victims of Significant Financial Events
- US Law Enforcement and Sanctions
- TA505 Exploiting Serv-U Vulnerability
- Other Ransomware Group Insights
Other Notable Highlights in Brief

Läs rapporten

MYSTERYSNAIL: Exploits Windows Zero Day
ESPECTER: A Real World UEFI Bootkit
RANSOMWARE: Trends and Notable Reports
- US Treasury Financial Trends Report
- VirusTotal Global Ransomware Context Report
- BlackMatter Ransomware
- Ransomware Tradecraft Evolutions
Other Notable Highlights in Brief