#DoYouKnowAdversary Ransomware Alert! #CL0P ransomware, associated with Russian threat group TA505, was first discovered in 2019. As of February 2025, it has targeted many victims across multiple sectors. The #Manufacturing sector has been the most heavily impacted, with additional attacks observed in #education, #transportation and #technology. CL0P ransomware primarily operates as a (RaaS) ransomware-as-a-service. Leverage our #ThreatIntelligence to anticipate attack patterns, strengthen defenses, and refine response strategies. 🔗 For more information, Visit #LOVI: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #MalwareCampaign #MitreAttack #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI #Ransomware

#DoYouKnowAdversary Explore our Healthcare Sector Intelligence for the 4th week of January 2025: #Ransomware groups like #INCRansom, #SpaceBears, #Everest and #KillSec are increasingly targeting #healthcare organizations. These attacks affect countries like the US, India, Brazil and Chile. INCRansom stands out as the most active ransomware group, significantly outpacing the other three ransomware families. - Exploited vulnerabilities to gain initial access - Utilized #PowerShell to execute various payloads - Encrypted critical data for impact, demanding #ransom for decryption - Exploited vulnerabilities in products such as #NetScaler, #Citrix and #Fortinet Strengthen your defenses with LOVI’s Threat Intelligence and stay ahead of emerging threats. 🔗 Visit LOVI on recent ransomware trends: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #HealthcareSecurity #LOVI #MitreATTACK #HIPAA #CyberResilience #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI

#DoYouKnowAdversary Explore our Healthcare Sector Intelligence for the 3rd week of January 2025: #Ransomware groups like #Lynx, #INCRansom, #Hunters International and #Fog are increasingly targeting #healthcare organizations. These attacks affect countries like the US, Canada, France and UK. Lynx stands out as the most active ransomware group, significantly outpacing the other three ransomware families. - Exploited remote access services like #RDP and #SMB for lateral movement - Exploited vulnerabilities to perform #privilege escalation - Encrypted critical data for impact, demanding #ransom for decryption - Exploited vulnerabilities in products such as #Sonicwall, #Citrix, #Veeam and #Fortinet Strengthen your defenses with LOVI’s Threat Intelligence and stay ahead of emerging threats. 🔗 Visit LOVI on recent ransomware trends: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #HealthcareSecurity #LOVI #MitreATTACK #HIPAA #CyberResilience #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI

#DoYouKnowAdversary Ransomware Alert! #Incransom ransomware, linked to the threat actor GOLD IONIC, has been active since early 2023, targeting 126 victims as of January #2025. The #healthcare sector has been the most affected, with other impacted sectors including #manufacturing, #business services and #technology. Most victims are based in the #US, #UK and #Canada. Recent incidents in January 2025 include attacks on organizations in healthcare and business services. Leverage our #ThreatIntelligence to anticipate attack patterns, strengthen defenses, and refine response strategies. 🔗 For more information, Visit #LOVI: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #MalwareCampaign #MitreAttack #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI

#DoYouKnowAdversary Ransomware Alert! The #Eldorado ransomware gang which emerged in March 2024, runs a Ransomware-as-a-Service targeting #Windows and #Linux systems and recruits affiliates through the "RAMP" dark web forum. In early #2025, they expanded their reach from North America into Latin America and Europe, targeting organizations across #technology, #energy, #manufacturing and #business sectors, with a notable focus on Latin American industry. Leverage our #ThreatIntelligence to anticipate attack patterns, strengthen defenses, and refine response strategies. 🔗 For more information, Visit #LOVI: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #MalwareCampaign #MitreAttack #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI #NIST

#DoYouKnowAdversary Explore our Healthcare Sector Intelligence for the 3rd week of December 2024: #Ransomware groups like #Everest, #Stormous, #RansomHub and #BrainCipher are increasingly targeting #healthcare organizations. These attacks affect countries like the UnitedStates, Canada, India and Ecuador. Everest & RansomHub stands out as the most active ransomware group, accounting for 60% of the #victims, significantly outpacing the other two ransomware families. - Exploited remote access services like #RDP and #SMB to gain unauthorized system access. - Employed #credential theft techniques to infiltrate networks and escalate #privileges. - Exploited vulnerabilities in products such as #Microsoft, #BIG-IP, #NetScaler and #Citrix. - Leveraged #C2 for data #exfiltration. Strengthen your defenses with LOVI’s Threat Intelligence and stay ahead of emerging threats. 🔗 Visit LOVI on recent ransomware trends: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #HealthcareSecurity #LOVI #MitreATTACK #HIPAA #CyberResilience #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI

#DoYouKnowAdversary Ransomware Alert! #BrainCipher emerged as a new actively exploited ransomware in mid-2024 and quickly gained attention following a significant attack that disrupted key public services in Indonesia, including immigration systems. It is capable of disabling #Windows Defender and creating #scheduled tasks to maintain persistent access to victims' machines. It primarily targets businesses across various sectors with high-profile big-game hunting and double-extortion attacks. - Brain Cipher has impacted over 20 victims, with the largest concentration in #UnitedStates (30%), followed by #Mexico, #France and #Argentina. - Top 3 affected industries include #Manufacturing, #Healthcare and #Telecommunication. - Brain Cipher has targeted regions including #North America, #Europe, #Africa, #Asia and #Middle East. Leverage our #ThreatIntelligence to anticipate attack patterns, strengthen defenses, and refine response strategies. 🔗 For more information, Visit #LOVI: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #MalwareCampaign #MitreAttack #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI

#DoYouKnowAdversary Ransomware Alert! Kill Security #ransomware is active since October 2023, has primarily targeted #healthcare, #finance and #technology industries. Their #ransom demands range from €1,500 to €94,429, typically paid in #Monero for anonymity. In 2024, #attacks surged, with a 400% spike in August and 153.85% in October, making India the most affected country. Although #November saw 36.36% of the activity observed in October, compromises continue throughout the month. Leverage our #ThreatIntelligence to anticipate attack patterns, strengthen defenses, and refine response strategies. 🔗 For more information, Visit #LOVI: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #MalwareCampaign #MitreAttack #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI #NIST #KillSec

#DoYouKnowAdversary Explore our Healthcare Sector Intelligence for the 3rd week of November 2024: Healthcare systems are under siege by advanced ransomwares like #KillSec and #Bianlian. Threat actors, including #FIN7 and #Storm-0940, are actively targeting the #healthcare sector, employing sophisticated tactics such as #keylogging and #exfiltration to cloud storage to compromise data security. Key Impacts: - In 2024, the average cost for healthcare organizations to recover from a #ransomware attack rose to $2.57 million, up from $2.2 million in 2023. - Compliance risks to #HIPAA regulations are increasing, driven by adversary techniques targeting patient and operational data. - Adversaries are exploiting #vulnerabilities, such as CVE-2024-1709 and CVE-2024-3400, to infiltrate healthcare systems and extract sensitive information. Strengthen your defenses with LOVI’s Threat Intelligence and stay ahead of emerging threats. 🔗 Visit LOVI on recent ransomware trends: vi.loginsoft.com/threat-prof… #CyberThreatIntelligence #HealthcareSecurity #LOVI #MitreATTACK #HIPAA #CyberResilience #TTPs #CyberSecurity #VulnerabilityIntelligence #Infosec #OSINT #ThreatInformedDefense #CTI

We're thrilled to announce that our 'System-41' threat analytics are now accessible on the @TidalCyber platform. Check out our latest blog on IcedID Malware at research.loginsoft.com/threa… #icedid #tidalcyber #loginsoft #threatdetection #threatintelligence #osquery #dfir