Targeted Dharma Ransomware Intrusions Exhibit Consistent Techniques
Since at least 2018, criminal actors have been conducting big game hunting (BGH) campaigns, deploying ransomware on a targeted scale against large…
Research & Threat Intel
Situational Awareness: Cyber Threats Heightened by COVID-19 and How to Protect Against Them
Please Note: Check this blog for frequent updates on adversary activity related to COVID-19. June 24, 2020: Observed Activity Update As the…
Who is REFINED KITTEN?
Common Aliases REFINED KITTEN may also be identified by the following pseudonyms: APT33 Elfin Magnallium Holmium REFINED KITTEN’s Origins REFINED KITTEN is…
WIZARD SPIDER Adds New Features to Ryuk for Targeting Hosts on LAN
CrowdStrike® Intelligence analyzed variants of Ryuk (a ransomware family distributed by WIZARD SPIDER) with new functionality for identifying and encrypting files on…
Ransomware Increases the Back-to-School Blues
As students all over the United States donned their backpacks and packed their lunches to go back to school this year, the…
Who is Salty Spider (Sality)?
Common Aliases SALTY SIDER is most commonly identified with the botnet it maintains (Sality) and it’s associated pseudonyms: KuKu SalLoad Kookoo SaliCode…
Webcast: A Deep Dive Into the Mobile Malware Report Trends and Recommendations
A new webcast, “Threat Landscape: Mobile Malware,” delves into the challenges of securing mobile devices in light of their ubiquitous use in…
CrowdStrike Mobile Threat Report Offers Trends and Recommendations for Securing Your Organization
The universal adoption of mobile devices in business environments has created new attack vectors that organizations struggle to address. A new report…
BitPaymer Source Code Fork: Meet DoppelPaymer Ransomware and Dridex 2.0
CrowdStrike® Intelligence has identified a new ransomware variant identifying itself as BitPaymer. This new variant was behind a series of ransomware campaigns…
New Evidence Proves Ongoing WIZARD SPIDER / LUNAR SPIDER Collaboration
On March 17, 2019, CrowdStrike® Intelligence observed the use of a new BokBot (developed and operated by LUNAR SPIDER) proxy module in…