Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

coralogix

Mamona Ransomware (RAAS) - Offline Commodity Ransomware with Custom Encryption

May 18, 2025 By Hetram Yadav In Coralogix
A newly identified strain of commodity ransomware named Mamona has emerged in the cybercriminal underground. This threat diverges from typical ransomware-as-a-service (RaaS) models by functioning entirely offline, relying on custom-built cryptographic routines and deploying no external command-and-control (C2) infrastructure.
Read Post
fidelis security

Risks and Mitigation of Malware Explained: Top 5 Strategies

May 15, 2025 By Fidelis Security In Fidelis Security
Malware—short for malicious software and malicious programs—is one of the most dangerous cybersecurity threats today. From computer viruses and spyware to ransomware and trojans, these harmful programs are designed to: Cybercriminals are constantly developing new and more advanced forms of malware. Every single day, over half a million new malware samples are discovered globally, showing just how fast these threats are evolving. For businesses, the consequences can be severe.
Read Post
foresiet

LockBit Ransomware Panel Breached: Database Dump Reveals Deep Insights into RaaS Infrastructure

May 14, 2025 By Foresiet In Foresiet
The LockBit ransomware group's dark web infrastructure has suffered a major blow following a significant breach on May 7, 2025. This cyberattack targeted LockBit's onion-based infrastructure—including their affiliate and admin panels—and resulted in the complete defacement of the sites. The attackers left behind a taunting message: "Don't do crime, CRIME IS BAD xoxo from Prague," along with a link to a leaked MySQL database dump.
Read Post
levelblue

Ransomware Response Plan: What Steps Schools and Libraries Should Take After an Attack

May 14, 2025 By Sarah Manley In LevelBlue
In Part 1 of this blog series The Ransomware Threat: Preparing Schools and Libraries for Ransomware Attacks, we discussed creating a pre-incident plan that includes a backup process, asset management, identity and access management, risk-based vulnerability management, and security awareness training to minimize the risk of ransomware attacks.
Read Post
Featured Post
Why Conventional Disaster Recovery Won't Save You from Ransomware

Why Conventional Disaster Recovery Won't Save You from Ransomware

May 14, 2025 By Justin Giardina, Chief Technology Officer In SecuritySenses
The conventional formula for maintaining business continuity in the face of unexpected IT disruptions is as follows: Back up your data. Make a recovery plan. Test the recovery plan periodically. That approach may work well enough if your primary concern is defending against risks like server failures or data centre outages caused by natural disasters. But in the present age of widespread ransomware attacks, conventional backup and recovery planning aren't always enough.
Read Post
aikido

You're Invited: Delivering malware via Google Calendar invites and PUAs

May 13, 2025 By Mackenzie Jackson In Aikido
On March 19th, 2025, we discovered a package called os-info-checker-es6 and were taken aback. We could tell it was not doing what it said on the tin. But what's the deal? We decided to investigate the matter and initially hit some dead ends. But patience pays off, and we eventually got most of the answers we sought. We also learned about Unicode PUAs (No, not pick-up artists). It was a roller coaster ride of emotions!
Read Post
knowbe4

How to Protect Your Business from Scattered Spider's Latest Attack Methods

May 13, 2025 By KnowBe4 Team In KnowBe4
Mandiant warns that the Scattered Spider cybercriminal group is using “brazen” social engineering attacks to target large enterprise organizations in a wide range of sectors. Specifically, the group targets “organizations with large help desk and outsourced IT functions which are susceptible to their social engineering tactics.” The threat actors impersonate employees and attempt to trick IT workers into granting them access. The group also poses as IT workers to target employees.
Read Post
Risks of Using Public Wi-Fi for Crypto Transactions

Risks of Using Public Wi-Fi for Crypto Transactions

May 13, 2025 By SecuritySenses In SecuritySenses
As cryptocurrency adoption continues to rise, the ease of managing assets through mobile wallets and trading platforms has brought a new layer of convenience. However, this accessibility can also lead to overlooked security risks, especially when users rely on public Wi-Fi networks for transactions. Airports, coffee shops, hotels, and public transportation hubs may offer free internet access, but these networks present significant vulnerabilities that can expose sensitive information.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.