Business security


293 articles

Ransomware

South African power company battles ransomware attack

South African power company battles ransomware attack

Ransomware

South African power company battles ransomware attack

The power utility appears to be well on track to a swift recovery following an attack that ultimately left some people without electricity

Tomáš Foltýn26 Jul 2019


Ransomware

Two US cities opt to pay $1m to ransomware operators

Two US cities opt to pay $1m to ransomware operators

Ransomware

Two US cities opt to pay $1m to ransomware operators

A few days apart, two cities in Florida cave in to extortionists’ demands in hopes of restoring access to municipal computer systems

Tomáš Foltýn26 Jun 2019


Ransomware

Ransomware vs. printing press? US newspapers face "foreign cyberattack"

Ransomware vs. printing press? US newspapers face "foreign cyberattack"

Ransomware

Ransomware vs. printing press? US newspapers face "foreign cyberattack"

Did malware disrupt newspaper deliveries in major US cities? Here’s what’s known about the incident so far and the leading suspect: Ryuk ransomware. Plus, advice on defending your organization against such attacks.

Stephen Cobb31 Dec 2018


Ransomware

Ransomware and the enterprise: A new white paper

Ransomware and the enterprise: A new white paper

Ransomware

Ransomware and the enterprise: A new white paper

Ransomware remains a serious threat and this new white paper explains what enterprises need to know, and do, to reduce risk

Stephen Cobb29 Oct 2018


Ransomware

ESET releases new decryptor for Syrian victims of GandCrab ransomware

ESET releases new decryptor for Syrian victims of GandCrab ransomware

Ransomware

ESET releases new decryptor for Syrian victims of GandCrab ransomware

ESET experts have created a new decryption tool that can be used by Syrian victims of the GandCrab ransomware. It is based on a set of keys recently released by the malware operators

Ondrej Kubovič25 Oct 2018


Ukraine Crisis – Digital Security Resource Center

GreyEnergy: Updated arsenal of one of the most dangerous threat actors

GreyEnergy: Updated arsenal of one of the most dangerous threat actors

Ukraine Crisis – Digital Security Resource Center

GreyEnergy: Updated arsenal of one of the most dangerous threat actors

ESET research reveals a successor to the infamous BlackEnergy APT group targeting critical infrastructure, quite possibly in preparation for damaging attacks

Anton Cherepanov and Robert Lipovsky17 Oct 2018


Ukraine Crisis – Digital Security Resource Center

New TeleBots backdoor: First evidence linking Industroyer to NotPetya

New TeleBots backdoor: First evidence linking Industroyer to NotPetya

Ukraine Crisis – Digital Security Resource Center

New TeleBots backdoor: First evidence linking Industroyer to NotPetya

ESET’s analysis of a recent backdoor used by TeleBots – the group behind the massive NotPetya ransomware outbreak – uncovers strong code similarities to the Industroyer main backdoor, revealing a rumored connection that was not previously proven

Anton Cherepanov and Robert Lipovsky11 Oct 2018


Ransomware

Bristol airport takes flight screens offline after apparent ransomware attack

Bristol airport takes flight screens offline after apparent ransomware attack

Ransomware

Bristol airport takes flight screens offline after apparent ransomware attack

The screens in “key locations” are back up and running again, while the airport paid no ransom to return its systems to working order

Tomáš Foltýn17 Sep 2018


Critical Infrastructure

Black Hat 2018: Protecting Industrial Control System

Black Hat 2018: Protecting Industrial Control System

Critical Infrastructure

Black Hat 2018: Protecting Industrial Control System

Aiming to protect critical infrastructure against attacks

Cameron Camp13 Aug 2018