The Week in Ransomware - June 10th 2022 - Targeting Linux

Gandalf_The_Grey

Level 63
Thread author
Verified
Honorary Member
Top poster
Content Creator
Well-known
Apr 24, 2016
5,161
It has been relatively quiet this week with many companies and researchers at the RSA conference. However, we still had some interesting ransomware reports released this week.

Advanced Intel released a deep dive on BlackCat/AlphV, revealing some of the technical details of the ransomware operation.

We learned that Black Basta is using QBot to spread laterally in breached networks, and a new Linux encryptor was found for the ransomware operation as well.

The Cuba ransomware operation also came back to life, with numerous attacks in March and April.

For the most bizarre news of the week, a ransomware dev is selling their decryptor on the Roblox gaming platform.

Finally, Vice Society claimed the attack on the City of Palermo, Italy, whose online operations are still impacted.