Ransomware Actors Blending Legitimate Tools with Custom Malware to Evade Detection

Threat Score:
77
Cybersecurity News
7 hours ago

Overview

The cybersecurity landscape faces a new sophisticated threat as the Crypto24 ransomware group demonstrates an alarming evolution in attack methodology, seamlessly blending legitimate administrative tools with custom-developed malware to execute precision strikes against high-value targets. This emerging ransomware operation has successfully compromised organizations across Asia, Europe, and the United States, with a particular focus on […]...

Related Articles

5 articles
1

New Crypto24 Ransomware Attacks Bypass EDR

Dark Reading • 9 hours ago

While several cybercrime groups have embraced "EDR killers," researchers say the deep knowledge and technical skills demonstrated by Crypto24 signify a dangerous escalation.

Score
86
Read more
5
Typhoon-adjacent Chinese crew broke into Taiwanese web host

Typhoon-adjacent Chinese crew broke into Taiwanese web host

The Register Security • 6 hours ago

Cyber-crime Typhoon-adjacent Chinese crew broke into Taiwanese web host Is that a JuicyPotato on your network? A suspected Chinese-government-backed cyber crew recently broke into a Taiwanese web hosting provider to steal credentials and plant backdoors for long-term access, using a mix of open-source and custom software tools, Cisco Talos reports. Talos tracks the Chinese-speaking advanced persistent threat (APT) group as UAT-7237 and says that it has been active since at least 2022. The securi

Score
74
Read more