Related Families: GreyEnergy, Prestige
Verticals Targeted: Critical Infrastructure
Related Families: Effluence
Executive Summary
A Linux variant of Cerber ransomware was observed exploiting CVE-2023-22518, a vulnerability affecting Atlassian Confluence.
Related Families: UPSTYLE
Executive Summary
Since late March 2024, a threat actor dubbed UTA0218 has been leveraging a zero-day exploit of CVE-2024-3400.
Verticals Targeted: Financial
Executive Summary
DarkGate was observed in early 2024 in a campaign leveraging CVE-2024-21412 to target entities in the financial vertical.
Related Families: IcedID, DanaBot
Executive Summary
Latrodectus is a downloader first seen in the wild in late 2023. It has been used by threat actors who operate as initial access brokers (IAB).
Verticals Targeted: Government, Healthcare
Executive Summary
INC is a relatively new ransomware group that has been active since summer 2023. The group recently claimed responsibility for attacks on Leicester City Council and NHS services in Scotland.
Verticals Targeted: Technology, Finance, Legal Services, Manufacturing, Government, Energy, Insurance, Construction