The Week in Ransomware - October 23rd 2020 - From Russia with Love

【概要】

マルウェア名	備考
Black Heart
Clay
Darkside
Dharma
LockBit
Pransomware
Ryuk
STOP	STOP Djvu
NotPetya
Szymekk
Vaggen
Venom RAT
WastedLocker
Yatron Decrypt0r

【ニュース】

◆The Week in Ransomware - October 23rd 2020 - From Russia with Love (BleepingComputer, 2020/10/23 17:38)
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-23rd-2020-from-russia-with-love/

【詳細】

■2020/10/17

◆New Dharma ransomware variants (Twitter(Jakub Kroustek), 2020/10/17)
https://twitter.com/JakubKroustek/status/1317251006271455235

◆New Pransomware ransomware (Twitter(@Glacius_ ), 2020/10/17)
https://twitter.com/Glacius_/status/1317519366041329665?s=20

■2020/10/18

◆New STOP Djvu ransomware variant (Twitter(Michael Gillespie), 2020/10/18)
https://twitter.com/demonslay335/status/1317893241925152768?s=20

■2020/10/19

◆US indicts Russian GRU 'Sandworm' hackers for NotPetya, worldwide attacks (BleepingComputer, 2020/10/19 14:42)
https://www.bleepingcomputer.com/news/security/us-indicts-russian-gru-sandworm-hackers-for-notpetya-worldwide-attacks/

◆New Vaggen Ransomware (Twitter(Marcelo Rivero), 2020/10/19)
https://twitter.com/MarceloRivero/status/1318319318166310914

■2020/10/20

◆Darkside ransomware donates $20K of extortion money to charities (BleepingComputer, 2020/10/20)
[Darksideランサムウェアは、恐喝金の20,000ドルを慈善団体に寄付する]
https://www.bleepingcomputer.com/news/security/darkside-ransomware-donates-20k-of-extortion-money-to-charities/
⇒ https://malware-log.hatenablog.com/entry/2020/10/20/000000_5

◆Barnes & Noble hit by Egregor ransomware, strange data leaked (BleepingComputer, 2020/10/20 14:53)
https://www.bleepingcomputer.com/news/security/barnes-and-noble-hit-by-egregor-ransomware-strange-data-leaked/

◆New Dharma ransomware variant (Twitter(Jakub Kroustek), 2020/10/20)
https://twitter.com/JakubKroustek/status/1317251006271455235

◆New STOP Djvu ransomware variant (Twitter(Michael Gillespie), 20201/10/20)
https://twitter.com/demonslay335/status/1318580750141296641?s=20

◆New Black Heart ransomware variant (Twitter(Siri), 2020/10/20)
https://twitter.com/siri_urz/status/1318535675814268929?s=20

◆New ransomware discovered (Twitter(Siri), 2020/10/20)
https://twitter.com/siri_urz/status/1318464753564602368?s=20

■2020/10/21

◆LockBit ransomware moves quietly on the network, strikes fast (BleepingComputer, 2020/10/21 10:28)
[LockBitのランサムウェアは、ネットワーク上で静かに移動し、高速攻撃を行います。]
https://www.bleepingcomputer.com/news/security/lockbit-ransomware-moves-quietly-on-the-network-strikes-fast/
⇒ https://malware-log.hatenablog.com/entry/2020/10/21/000000_1

◆Montreal's STM public transport system hit by ransomware attack (BleepingComputer, 2020/10/21 01:26)
https://www.bleepingcomputer.com/news/security/montreals-stm-public-transport-system-hit-by-ransomware-attack/

◆New Dharma ransomware variant (Twitter(Marcelo Rivero), 2020/10/21)
https://twitter.com/MarceloRivero/status/1318979882311950336

■2020/10/22

◆French IT giant Sopra Steria hit by Ryuk ransomware (BleepingComputer, 2020/10/22)
https://www.bleepingcomputer.com/news/security/french-it-giant-sopra-steria-hit-by-ryuk-ransomware/
⇒ https://malware-log.hatenablog.com/entry/2020/10/22/000000_2

◆Venom RAT adds ransomware module (Twitter(Karsten Hahn), 2020/10/22)
https://twitter.com/struppigel/status/1319237254330580993

■2020/10/23

◆WastedLocker ransomware hits Boyne Resorts ski resort operator (2020/10/23 16:14)
https://www.bleepingcomputer.com/news/security/wastedlocker-ransomware-hits-boyne-resorts-ski-resort-operator/

◆New ransomware discovered (Twitter(Siri), 2020/10/23)
https://twitter.com/siri_urz/status/1319594928641540098?s=20

◆New Dharma ransomware variant (Twitter(xiaopao)), 2020/10/23
https://twitter.com/Kangxiaopao/status/1319540451855089664?s=20

◆New Clay ransomware (Twitter(), 2020/10/23)
https://twitter.com/Kangxiaopao/status/1319464720580050946?s=20

◆New Yatron Decrypt0r 2.0 (Twitter(GrujaRS), 2020/10/23)
https://twitter.com/GrujaRS/status/1319714035949096961

◆New #Szymekk #Ransomware (Twitter(GrujaRS), 2020/10/23)
https://twitter.com/GrujaRS/status/1319724030073647104

【関連情報】

◇前週

◆The Week in Ransomware - October 16th 2020 - The weekend is upon us (BleepingComputer, 2020/10/16 19:13)
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-16th-2020-the-weekend-is-upon-us/
⇒ https://malware-log.hatenablog.com/entry/2020/10/16/000000_1

【関連まとめ記事】

◆全体まとめ
　◆資料・報告書 (まとめ)

◆The Week in Ransomware (まとめ)
https://malware-log.hatenablog.com/entry/The_Week_in_Ransomware

　◆マルウェア / Malware (まとめ)
　　◆ランサムウェア (まとめ)

◆NotPetya (まとめ)
https://malware-log.hatenablog.com/entry/NotPetya