The Week in Ransomware - January 15th 2021 - Locking you up

【ニュース】

◆The Week in Ransomware - January 15th 2021 - Locking you up (BleepingComputer, 2021/01/15 17:37)
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-january-15th-2021-locking-you-up/

【詳細】

■2021年01月09日

◆Hacker used ransomware to lock victims in their IoT chastity belt (BleepingComputer, 2021/01/09 10:24)
[ハッカーがランサムウェアを使って被害者をIoTの貞操帯に閉じ込めた]
https://www.bleepingcomputer.com/news/security/hacker-used-ransomware-to-lock-victims-in-their-iot-chastity-belt/

■2021年01月10日

◆Three new Dharma ransomware variants (Twitter(Jakub Kroustek), 2021/01/10)

Ransomware: Dharma
拡張子: .hub, .aol, or .14x

https://twitter.com/JakubKroustek/status/1348230044783702017

■2021年01月11日

◆Intel adds hardware-based ransomware detection to 11th gen CPUs (BleepinComputer, 2021/01/11 21:43)
https://www.bleepingcomputer.com/news/security/intel-adds-hardware-based-ransomware-detection-to-11th-gen-cpus/
⇒ https://malware-log.hatenablog.com/entry/2021/01/11/000000_1

◆DarkSide ransomware decryptor recovers victims' files for free (BleepingComputer, 2021/01/11 12:11)
[DarkSide ランサムウェア復号化ソフトは被害者のファイルを無料で復元する]
https://www.bleepingcomputer.com/news/security/darkside-ransomware-decryptor-recovers-victims-files-for-free/
⇒ https://malware-log.hatenablog.com/entry/2021/01/11/000000_2

◆New STOP ransomware variant (Twitter(Raavan Extended), 2021/01/11)

Ransomware: STOP
拡張子: .qlkm

https://twitter.com/ExtendedRaavan/status/1348616725466648576

◆New STOP ransomware variant (Twitter(Amigo-A), 2021/01/11)

Ransomware: Flamingo
拡張子: .LIZARD, Ransom Note: ReadThis.txt

https://twitter.com/Amigo_A_/status/1348697964106178560

■2021年01月12日

◆Capcom: 390,000 people may be affected by ransomware data breach (BleepingComputer, 2021/01/12)
[カプコン：ランサムウェアのデータ流出で39万人が被害を受ける可能性あり]
https://www.bleepingcomputer.com/news/security/capcom-390-000-people-may-be-affected-by-ransomware-data-breach/

◆New Judge ransomware (Twitter(xiaopao), 2021/01/12)

Ransomware: Judge
拡張子: .judge, Ransom Note: info.txt

https://twitter.com/Kangxiaopao/status/1348904073190207489

■2021年01月14日

◆Inside of CL0P’s ransomware operation (Telekom, 2021/01/14)
https://www.telekom.com/en/blog/group/article/inside-of-cl0p-s-ransomware-operation-615824

◆New variant of the Lucy Ransomware for Android (Twitter(MalwareHunterTeam), 2021/01/14)

Ransomware: Lucy

https://twitter.com/malwrhunterteam/status/1349655045659381763

◆New ByteLocker Ransomware (Twitter(GrujaRS), 2021/01/14)

Ransomware: ByteLocker

https://twitter.com/GrujaRS/status/1349806209898082304

◆DarkSide found to be very similar to REvil (Twitter(Vitali Kremez), 2021/01/14)

Ransomware: REvil
DarkSideに類似

https://twitter.com/VK_Intel/status/1349822585035513859

■2021年01月15日

◆Scotland environmental regulator hit by ‘ongoing’ ransomware attack (BleepingComputer, 2021/01/15 11:22)
[スコットランドの環境規制当局が「進行中の」ランサムウェア攻撃に見舞われる]

Ransomware: Conti

https://www.bleepingcomputer.com/news/security/scotland-environmental-regulator-hit-by-ongoing-ransomware-attack/
⇒ https://malware-log.hatenablog.com/entry/2021/01/15/000000_8

◆New BlackHeel HiddenTear variant (Twitter(GrujaRS), 2021/01/15)

Ransomware: BlackHeel HiddenTear
拡張子: .a

https://twitter.com/GrujaRS/status/1350047405694185474

◆New BlackHeel HiddenTear ransomware (Twitter(GrujaRS), 2021/01/15)

Ransomware: BlackHeel HiddenTear
拡張子: .boom, Ransom Note: READ_ME.hta

https://twitter.com/GrujaRS/status/1350181468765642752

【関連まとめ記事】

◆全体まとめ
　◆資料・報告書 (まとめ)

◆The Week in Ransomware (まとめ)
https://malware-log.hatenablog.com/entry/The_Week_in_Ransomware