The Week in Ransomware - November 11th 2022 - LockBit feeling the heat

【ニュース】

◆The Week in Ransomware - November 11th 2022 - LockBit feeling the heat (BleepingComputer, 2022/11/11 17:25)
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-11th-2022-lockbit-feeling-the-heat/

【詳細】

■2022年10月30日 (日)

◆New Azov data wiper tries to frame researchers and BleepingComputer (BleepingComputer, 2022/10/30 20:26)
[新しいAzovデータワイパーは、研究者とBleepingComputerをはめ込もうとします]
https://www.bleepingcomputer.com/news/security/new-azov-data-wiper-tries-to-frame-researchers-and-bleepingcomputer/
⇒ https://malware-log.hatenablog.com/entry/2022/10/30/000000_1

■2022年11月3日 (木)

◆Black Basta ransomware gang linked to the FIN7 hacking group (BleepingComputer, 2022/11/03 06:00)
[ハッキング集団「FIN7」に関連するランサムウェア集団「Black Basta」について]
https://www.bleepingcomputer.com/news/security/black-basta-ransomware-gang-linked-to-the-fin7-hacking-group/
⇒ https://malware-log.hatenablog.com/entry/2022/11/03/000000_1

◆LockBit ransomware claims attack on Continental automotive giant (BleepingComputer, 2022/11/03 14:25)
[ランサムウェア「LockBit」がコンチネンタル自動車大手に攻撃を主張]
https://www.bleepingcomputer.com/news/security/lockbit-ransomware-claims-attack-on-continental-automotive-giant/
⇒ https://malware-log.hatenablog.com/entry/2022/11/03/000000_2

◆New STOP ransomware variants (PCrisk(Twitter), 2022/11/03)

Ransomware: STOP
拡張子: .bowd

https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-11th-2022-lockbit-feeling-the-heat/

◆New Anon ransomware (PCrisk(Twitter), 2022/11/03)

Ransomware: Anon
拡張子: .anon_by, Ransomnote: anon_by.txt

https://twitter.com/pcrisk/status/1588119376506544128

■2022年11月4日 (金)

◆New inlock ransomware (PCrisk(Twitter), 2022/11/04)

Ransomware: inlock
拡張子: .inlock, Ransomnote: READ_IT.txt

https://twitter.com/pcrisk/status/1588429789299617793

■2022年11月7日 (月)

◆Azov Ransomware is a wiper, destroying data 666 bytes at a time (BleepingComputer, 2022/11/07 18:13)
[Azov Ransomwareは、一度に666バイトのデータを破壊するワイパーです]
https://www.bleepingcomputer.com/news/security/azov-ransomware-is-a-wiper-destroying-data-666-bytes-at-a-time/
⇒ https://malware-log.hatenablog.com/entry/2022/11/07/000000_1

◆Ransomware gang threatens to release stolen Medibank data (BleepingComputer, 2022/11/07 12:50)
[ランサムウェアの一団が、盗まれたメディバンクのデータを公開すると脅す]
https://www.bleepingcomputer.com/news/security/ransomware-gang-threatens-to-release-stolen-medibank-data/
⇒ https://malware-log.hatenablog.com/entry/2022/11/07/000000_2

◆New Dharma Ransomware variant (PCrisk(Twitter), 2022/11/07)

Ransomware: Dharma
拡張子: .bDAT

https://twitter.com/pcrisk/status/1589492042157412352

◆New STOP ransomware variants (PCrisk(Twitter), 2022/11/07)

Ransomware: STOP
拡張子: .zate / .zatp

https://twitter.com/pcrisk/status/1589525662641303552

◆New Xorist variant (PCrisk(Twitter), 2022/11/07)

Ransomware: Xorist
拡張子: .CrySpheRe, Ransomnote: КАК РАСШИФРОВАТЬ ФАЙЛЫ.txt

https://twitter.com/pcrisk/status/1589529806613671936

■2022年11月8日 (火)

◆LockBit affiliate uses Amadey Bot malware to deploy ransomware (BleepingComputer, 2022/11/08 17:56)
[LockBitの関連会社がマルウェア「Amadey Bot」を使用してランサムウェアを展開]
https://www.bleepingcomputer.com/news/security/lockbit-affiliate-uses-amadey-bot-malware-to-deploy-ransomware/
⇒ https://malware-log.hatenablog.com/entry/2022/11/08/000000_2

■2022年11月9日 (水)

◆Medibank warns customers their data was leaked by ransomware gang (BleepingComputer, 2022/11/09 11:43)
[メディバンク、ランサムウェア集団によるデータ流出について顧客に警告]
https://www.bleepingcomputer.com/news/security/medibank-warns-customers-their-data-was-leaked-by-ransomware-gang/
⇒ https://malware-log.hatenablog.com/entry/2022/11/09/000000_1

■2022年11月10日 (木)

◆Russian LockBit ransomware operator arrested in Canada (BleepingComputer, 2022/11/10 10:31)
[ロシアのランサムウェア「LockBit」運営者がカナダで逮捕される]
https://www.bleepingcomputer.com/news/security/russian-lockbit-ransomware-operator-arrested-in-canada/
⇒ https://malware-log.hatenablog.com/entry/2022/11/10/000000

◆Russian military hackers linked to ransomware attacks in Ukraine (BleepingComputer, 2022/11/10 14:47)
[ロシア軍のハッカーがウクライナのランサムウェア攻撃と関連づけられる]
https://www.bleepingcomputer.com/news/security/russian-military-hackers-linked-to-ransomware-attacks-in-ukraine/
⇒ https://malware-log.hatenablog.com/entry/2022/11/10/000000_1

◆US Health Dept warns of Venus ransomware targeting healthcare orgs (BleepingComputer, 2022/11/10 16:50)
[米保健省、医療機関を狙う金星ランサムウェアに警告]
https://www.bleepingcomputer.com/news/security/us-health-dept-warns-of-venus-ransomware-targeting-healthcare-orgs/
⇒ https://malware-log.hatenablog.com/entry/2022/11/10/000000_2

◆Popular UK motor racing circuit investigating ransomware attack (The Record, 2022/11/10)
[英国の人気モーターレーシングサーキットがランサムウェア攻撃を調査中]
https://therecord.media/popular-uk-motor-racing-circuit-investigating-ransomware-attack/
⇒ https://malware-log.hatenablog.com/entry/2022/11/10/000000_3

■2022年11月11日 (金)

◆Canadian food retail giant Sobeys hit by Black Basta ransomware (BleepingComputer, 2022/11/11 13:38)
[カナダの食品小売大手Sobeysがランサムウェア「Black Basta」の被害を受ける]
https://www.bleepingcomputer.com/news/security/canadian-food-retail-giant-sobeys-hit-by-black-basta-ransomware/
⇒ https://malware-log.hatenablog.com/entry/2022/11/11/000000

【関連まとめ記事】

◆全体まとめ
　◆資料・報告書 (まとめ)

◆The Week in Ransomware (まとめ)
https://malware-log.hatenablog.com/entry/The_Week_in_Ransomware