Ransom & Dark Web Issues Week 4, September 2024
ASEC Blog publishes Ransom & Dark Web Issues Week 4, September 2024 LockBit ransomware gang attacks major South Korean tire manufacturer Data from a U.S. food delivery service company leaked on BreachForums Pro-Russian hacktivists conduct DDoS attacks on South Korean government websites
Ransom & Dark Web Issues Week 2, September 2024
ASEC Blog publishes Ransom & Dark Web Issues Week 2, September 2024 Pro-Russian Hacktivists: Conducting DDoS Attacks Targeting Taiwanese Government Agencies Customer Data Breach at South Korea’s Largest Shopping Mall: The Role and Threats of E-Commerce Platforms [Ransom] Medusa Ransomware’s New Victim: U.S. Water Service Provider
Threat Trend Report on Deep Web & Dark Web – Ransomware Groups & Cybercrime Forums and Markets in July 2024
Note This trend report on the deep web and dark web of July 2024 is sectioned into Ransomware, Forums & Black Markets, and Threat Actor. We would like to state beforehand that some of the content has yet to be confirmed to be true. Major Issues 1) Ransomware
Ransom & Dark Web Issues Week 1, August 2024
ASEC Blog publishes Ransom & Dark Web Issues Week 1, August 2024
Ransom & Dark Web Issues Week 3, July 2024
ASEC Notes publishes Ransom & Dark Web Issues Week 3, July 2024
Ransom & Dark Web Issues Week 3, July 2024
ASEC Blog publishes Ransom & Dark Web Issues Week 3, July 2024
Threat Trend Report on Deep Web &Dark Web – Ransomware Groups & Cybercrime Forums and Markets in June 2024
Note This trend report on the deep web and dark web of June 2024 is sectioned into Ransomware, Forums & Black Markets, and Threat Actor. We would like to state beforehand that some of the content has yet to be confirmed to be true. Major Issues 1.
Ddostf DDoS Bot Malware Attacking MySQL Servers
The AhnLab Security Emergency response Center’s (ASEC) analysis team is constantly monitoring malware distributed to vulnerable database servers. MySQL server is one of the main database servers that provides the feature of managing large amounts of data in a corporate or user environment. Typically, in Windows environments, MS-SQL is primarily
Tsunami DDoS Malware Distributed to Linux SSH Servers
AhnLab Security Emergency response Center (ASEC) has recently discovered an attack campaign that consists of the Tsunami DDoS Bot being installed on inadequately managed Linux SSH servers. Not only did the threat actor install Tsunami, but they also installed various other malware such as ShellBot, XMRig CoinMiner, and Log Cleaner.
ChinaZ DDoS Bot Malware Distributed to Linux SSH Servers
AhnLab Security Emergency response Center (ASEC) has recently discovered the ChinaZ DDoS Bot malware being installed on inadequately managed Linux SSH servers. As one of the Chinese threat groups that were first discovered around 2014, the ChinaZ group installs various DDoS bots on Windows and Linux systems. [1] Major DDoS bots assumed
