Content by Doug Olenick

BlackMatter Knocks Marketron Off the Air

Doug Olenick  •  September 22, 2021

Marketron Broadcast Solutions was hit over the weekend by a ransomware attack launched by the BlackMatter gang, and the attack has taken down a number of the marketing firm's products. Marketron is currently in talks with its attacker.

Ransomware Reportedly Hits Iowa Farm Services Cooperative

Scott Ferguson , Doug Olenick  •  September 20, 2021

NEW Cooperative, an Iowa-based farm services cooperative, has reportedly been targeted by the BlackMatter ransomware gang, demanding a $5.9 million payment from the organization, according to security researchers and published reports. The cooperative is working with law enforcement agencies.

Is Grief's Threat to Wipe Decryption Key Believable?

Doug Olenick  •  September 16, 2021

Regarding the recent tactical innovation by the Grief ransomware gang that is threatening to wipe a victim's data and decryption key if the victim engages a ransom negotiator, analysts are calling this a desperate ploy to scare a target into paying the ransom demand.

CISA Warns of Holiday Ransomware Attacks

Doug Olenick  •  September 1, 2021

Citing damaging ransomware attacks that it, along with the FBI, has observed over recent holidays, the Cybersecurity and Infrastructure Security Agency issued an alert warning organizations to be prepared as the Labor Day holiday nears. CISA, however, is not tracking any immediate threats.

Bangkok Airways Execs Apologize for Data Breach

Doug Olenick  •  August 30, 2021

Bangkok Airways issued an apology late last week for a data breach that apparently compromised the personally identifiable information for an unstated number of its passengers. The LockBit ransomware gang claimed credit for the attack.

Nigerian Gang Asks for Insider Help to Plant Ransomware

Doug Olenick  •  August 19, 2021

A Nigeria-based ransomware gang is conducting a campaign that dangles a $1 million bribe - or a portion of any ransom collected - to employees of targeted organizations if they will install DemonWare ransomware on their corporate network.

Cybercriminals Reportedly Created Blockchain Analytics Tool

Doug Olenick  •  August 13, 2021

Cybercriminals have developed a blockchain analytics tool on the darknet that could help a gang launder illegally obtained bitcoin, and they are actively marketing it, according to the cryptocurrency analytics firm Elliptic. The tool, however, is rated as not entirely effective.

Accenture Hit by Apparent Ransomware Attack

Doug Olenick  •  August 11, 2021

The consultancy Accenture, which offers cybersecurity services, confirmed Wednesday it had been hit by a cyber incident. The ransomware gang LockBit took credit for the attack.

Is Darknet Forum Ransomware Chatter Ban Having an Impact?

Doug Olenick  •  August 6, 2021

The decision by the Russian-speaking darknet forums XSS and Exploit to ban all chatter relating to ransomware attacks has had a limited impact on cyber gangs' ability to communicate, according to the threat intelligence firm Digital Shadows.

Insurer: Size of Claims Paid for Ransomware Attacks Declines

Doug Olenick  •  July 29, 2021

Cyber insurance provider Coalition Inc. says its clients' average claims for losses when they were hit by a ransomware attack totaled $184,000 in the first half of this year, down 45% compared to the second half of 2020. Negotiating lower ransoms and more efficient recovery were key factors.

Kaseya Says It Paid No Ransom to Obtain Universal Decryptor

Doug Olenick  •  July 26, 2021

Remote management software company Kaseya says it obtained the ability to decrypt all victims of a massive REvil - aka Sodinokibi - attack via its software, without paying a ransom to attackers. But Kaseya has still not revealed how it obtained the decryption key, except to say it was supplied by a third party.

Kaseya Obtains Decryption Tool After REvil Ransomware Hit

Jeremy Kirk , Doug Olenick , Mathew J. Schwartz  •  July 22, 2021

Remote management software vendor Kaseya has obtained a decryption tool for all organizations affected by the massive ransomware attack launched via its software. The tool should especially help the many small businesses still struggling to recover. Kaseya declined to comment on how it obtained the decryptor.

Case Study: A REvil Ransom Negotiation

Doug Olenick  •  July 20, 2021

The blockchain analysis firm Elliptic offers a step-by-step case study, based on its research, of how one victim of the REvil ransomware gang negotiated a lower ransom payment. The study offers insights into how REvil operated before its online infrastructure disappeared last week.

What's Next Step for REvil Ransomware Victims?

Doug Olenick  •  July 16, 2021

Now that the REvil ransomware gang has apparently shut down, victims are in a precarious situation. They must either rely on backups to restore data access or wait for the release of a decryptor, making sure they retain all encrypted files.

REvil's Infrastructure Goes Offline

Doug Olenick  •  July 13, 2021

The REvil, aka Sodinokibi, ransomware gang's infrastructure, including its darknet sites, were offline Tuesday, numerous security specialists report. The reason for the sudden disappearance is far from clear.