Cybercrime

Record-breaking double-extortion cyber attack saw REvil gang exfiltrate financial data from Taiwan-based PC manufacturer

$50m ransomware demand on Acer is highest ever (computerweekly.com)

Acer told SearchSecurity in a statement that it has 'reported recent abnormal situations observed to the relevant law enforcement.' However, it did not confirm a ransomware attack.

Acer hit by apparent attack from REvil ransomware group (techtarget.com)

The investigation into a stolen Mimecast-issued digital certificate is now complete, and vendor said the initial intrusion was Sunburst malware in the SolarWinds Orion platform.

SolarWinds hackers stole Mimecast source code (techtarget.com)

The average amount paid out by ransomware victims has grown almost threefold to more than $300,000 per incident, according to a report

Average ransomware cost triples, says report (computerweekly.com)

Hybrid approach to encryption used by DearCry bears similarities to WannaCry

Unusual DearCry ransomware uses ‘rare’ approach to encryption (computerweekly.com)

Microsoft’s mitigation tool is designed to help customers without dedicated security or IT teams navigate fixing their vulnerable Exchange servers

Microsoft releases one-click ProxyLogon mitigation tool (computerweekly.com)

UK’s national cyber agency calls on organisations affected by the ProxyLogon vulnerabilities to patch their Microsoft Exchange Servers immediately

https://www.computerweekly.com/news/252497741/NCSC-issues-emergency-alert-on-Microsoft-Exchange-patch

While only a small number of DearCry ransomware victims have been reported at this time, the infections have hit organizations in the U.S., Canada, Australia and beyond.

https://searchsecurity.techtarget.com/news/252497747/DearCry-ransomware-impacting-Microsoft-Exchange-servers

The end of the Emotet botnet has shaken up the cyber criminal underground, with malicious actors turning to other...

https://www.computerweekly.com/news/252497657/After-Emotet-takedown-Trickbot-roars-up-threat-charts

Threat actors are now installing a new ransomware called 'DEARCRY' after hacking into Microsoft Exchange servers using the recently disclosed ProxyLogon vulnerabilities.

https://www.bleepingcomputer.com/news/security/ransomware-now-attacks-microsoft-exchange-servers-with-proxylogon-exploits/#.YE07yI4XQEM.twitter