/
threat_actors:LockBit × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

newsroom.trendmicro.com · medium

Trend Micro details role in international law enforcement disruption of LockBit ransomware, including pre-release LockBit-NG-Dev

Trend Micro disclosed its part in a multinational law enforcement operation against the LockBit ransomware group, working with the FBI and the NCA. Per the vendor, undercover infiltration helped prevent the release of the group's next malware product, LockBit-NG-Dev, and Trend customers received protection before LockBit had finished test…

LockBit
sentinelone.com · medium

BYOVD and EDR-Killer Hunting: Four Distinct Techniques Detection Teams Should Cover Separately Before Ransomware Deployment

SentinelOne argues that "EDR killer" covers four different techniques, and a single driver-load rule leaves blind spots. The four are bring-your-own-vulnerable-driver (BYOVD), bring-your-own-installer, admin-to-kernel, and driverless suspension. The article gives hunt logic for each and recommends rolling them out in order of signal quali…

FIN7 Qilin