Ransomware Newcomers from WithSecure’s Threat Highlight Report

,

WithSecure shared these Ransomware newcomers from their September 2023 report:

3AM
A new ransomware variant and group called 3AM has struck
victims and posted victim data on its dark web leak site since
the 17th of September. Interestingly, in one known instance
an attacker deployed 3AM after failing to deploy LockBit
suggesting the attacker was an affiliate in both groups.

Retch
Little is known about newcomer Retch but its ransom note
demands a relatively low amount of €300, suggesting it is
targeting small businesses or consumers, rather than bigger
organizations.

S.H.O
Another new variant that appears to be targeting small
businesses and consumers is S.H.O. Similarly, to Retch, this
group is demanding a small ransom of $200.

Lost Trust
LostTrust has posted 52 victims to its dark web leak site, a huge
number that was all dumped on the same date, suggesting a
longer campaign. This aligns with reports that LostTrust is a
simple rebrand of MetaEncryptor, with the groups utilizing the
same website templates and encryption locker.

CiphBit
Intelligence on CiphBit is scant, but the group dumped data
relating to eight different victims on its dark web leak site
in September. These victims come from different nations
(Canada, Belgium, France, Germany, Moldova, Poland, and
the UK) and different sectors, suggesting the group is purely
opportunistic, rather than motivated by a specific target
characteristic or ideology

WithSecure is an active player in controlling the threat in today’s cybersecurity landscape adding newly found threats in their AI powered cloud based endpoint protection. If it can be detected, it can be prevented.

ARA Industries is registered partner of WithSecure aiming to secure Small and Medium enterprises in the Philippines 1 device at a time. Start securing your digital assets today using WithSecure Elements.

Meet the Ducks – a Vietnamese threat group targeting Meta Business Accounts

,

In today’s interconnected world, social media has become the largest hub where individuals and businesses converge, with approximately 4.9 billion people using these platforms. For organizations, social media serves as a powerful tool to engage with the global audience, a resource that most businesses utilize in various ways.

However, while businesses have strong incentives to harness the potential of social media for their benefit, these platforms also present unique opportunities for adversaries with diverse intentions and capabilities. The challenges posed by adversaries on these platforms are multifaceted, ever-evolving, intricate, and, most significantly, detrimental.

WithSecure has published a complete report about the threat landscape surrounding Meta’s ad ecosystem that are pre-dominantly originating out of Vietnam. Additionally, they shared an update on the infamous DUCKTAIL operation exposed in their previous reports DUCKTAIL: An infostealer malware targeting Facebook Business accounts and DUCKTAIL returns: Underneath the ruffled feathers.

Checkout the full report here: https://labs.withsecure.com/publications/meet-the-ducks