Cable krebs stamos group ransomwhere software#
Cable krebs stamos group ransomwhere code#

“It makes you wonder if they’re having a hard time getting people to pay,” Cable said.Īccording to Cable, he reached out to the hackers by obtaining a cryptographic key to log on to their payment portal. Reuters was also able to log on and chat with an operator, but they told the news agency that the price was unchanged at $70 million “but we are always ready to negotiate.” They also told the reporter that harming the schools was an “accident.” Jack Cable is a computer scientist and security researcher, currently a Fellow with TechCongress. Jack previously was a Security Architect at Krebs Stamos. The hackers had far less concern about the supermarkets, saying “its nothing more than a business.” How it works: Ransomwhere is an open, crowdsourced ransomware payment tracker launched by Jack Cable, a former government cybersecurity expert who now works as a security architect for Krebs Stamos Group. While Cable believes they may be having trouble selling the data, others have wondered if the hackers bit off more than they could chew by encrypting so much data from so many businesses at once. “For all of their big talk on their blog, I think this got way out of hand,” Allan Liska of cybersecurity firm Recorded Future told CNBC.So, who’s getting the most ransom money? As of the writing of this script, here are the top five.

The group behind Conti may be the same organization behind the Ryuk ransomware. $12.1 million in bitcoin to REvil / Sodinokibi.The attack against Ireland’s Health Service is attributed to Conti. They’re not the only one that offers ransomware as a service but they were one of the most successful at it. Their highest profile attack was against the Casey desktop management service, but they also attacked the U.S. However, on July 13, 2021, REvil infrastructure shut down. The attack against the Colonial Pipeline system is attributed to Darkside as is an attack against Toshiba. Jack Cable, a security architect at Krebs Stamos group, and a former U.S.

Cable krebs stamos group ransomwhere code#

Its malware shares a lot of code with REvil’s. Cybersecurity and Infrastructure Security Agency worker, has started a ransomware payments tracking site called Ransomwhere. $4.5 million in bitcoin to RagnarLocker.On May 14, 2021, Darkside announced it had lost access to its payment server, blog and funds. $4.2 million in bitcoin to MountLocker.It has been used against Portugal’s Energy Utility, the gaming company Capcom and more recently, DRAM and NAND flash maker ADATA. This ransomware effort has been recently updated to better evade security. It’s been used more often against Biotech companies recently. Customized versions of MountLocker from Astro Locker and XingLocker are also out there.

It’s not reassuring to see the large amount of money going to ransomware, but if you need help making the case of why it’s important to prepare for it, maybe this helps.

And the data itself is useful at getting a handle on what the threats out there are. Subscribe to TechRepublic Top 5 on YouTube for all the latest tech advice for business pros from Tom Merritt.

Cable krebs stamos group ransomwhere software#

#Jack cable stamos ransomwhere software.