ransomware analysis

You might remember the Play ransomware crew from when they took down the city of Oakland... They have been very active since their emergence in June of 2022, targeting a wide range of businesses and critical infrastructure in North America, South America, Europe, and Australia. In October of 2023, the

The lockbit drama continues. Yesterday law enforcement resurrected one of the groups darkweb sites to tease forthcoming updates from the US and UK. Updates appear to include the real identity of the lockbit admin, lockbitsupp. And other ominous post titles like "What have we been up to?" show

dragonforce's first successful ransomware operation was the Ohio lottery in 2023... 86 organizations (that we know of) feel victim to ransomware last week... Of those, 12 were the work of dragonforce. They're an interesting group considering that they're known to call victims directly to

In February, Change Healthcare was targeted by the ALPHV/BlackCat ransomware group and despite an alleged $22M ransom payment, the data is now being held hostage for potential release.