Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
ShinyHunters Claim Hack of Rival Ransomware Gang Clop
The ShinyHunters hacking and extortion gang has claimed a cyber-attack against a fellow cybercriminal outfit, the Clop ransomware group. The incident, which came to light on the evening of 18 Septe
ShinyHunters hacks rival extortion gang and takes over its dark web site
Reportedly, the ShinyHunters extortion group breached the leak site of one of its competitors, the Clop ransomware gang. ShinyHunters is a financially motivated cybercrime and extortion group active
A Comparison of Elite Violence—1990s Shock Therapy in Russia and the U.S. Today
Lets start with a little quiz: if one reads the following excerpts from an Encyclopedia Britannica entry, is it talking about the US today or Russia in the 90s? This marriage of wealth and power tha
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Objects.
ShinyHunters says it hijacked Cl0p’s dark web leak site
On the night of Friday, September 18, the Tor leak site that the Cl0p ransomware gang used to name and pressure its victims was defaced. Another criminal group claimed responsibility, according to BleepingComputer. When people visited the site, they saw Pokém
AntiRansomware 2
The best protection from Ransomware and data hijacking ever! Protects you from Ransomware. Guarding your files in the background. The double net against Ransomware.
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation's data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. The attack began Friday night when ShinyHunters exploited
Encrypted files with unknown ransomware (Lockbit 3.0 Black)
Using ID Ransomware was always more preferable than NoMoreRansom since it could identify ransomware which added a prefix instead of an extension and more accurately identified ransomware by filemarke
Encrypted files with unknown ransomware - uses LockBit 3.0 note format, VT flags
Hello,My Windows 10 PC got infected with ransomware. Files were encrypted with the extension "3R9qG8i3Z" and a ransom note "3R9qG8i3Z.README.txt" was left behind. The ransom note is NOT the standard
Encrypted files with unknown ransomware - uses LockBit 3.0 note format, VT flags
Hello,My Windows 10 PC got infected with ransomware. Files were encrypted with the extension "3R9qG8i3Z" and a ransom note "3R9qG8i3Z.README.txt" was left behind. The ransom note is NOT the standard
Encrypted files with unknown ransomware - uses LockBit 3.0 note format, VT flags
Hello,My Windows 10 PC got infected with ransomware. Files were encrypted with the extension "3R9qG8i3Z" and a ransom note "3R9qG8i3Z.README.txt" was left behind. The ransom note is NOT the standard
Cerber .cerber extension � Trend Micro decryptor unsuccessful"
Cerber .cerber extension Trend Micro decryptor unsuccessful" - posted in Ransomware Help & Tech Support: Hello, My computer was infected with Cerber ransomware back in 2016. The encrypted files have the following pattern: Filename: 10 random alphanumeric ch