The Week in Ransomware - November 18th 2022 - Rising Operations

【ニュース】

◆The Week in Ransomware - November 18th 2022 - Rising Operations (BleepingComputer, 2022/11/18 17:13)
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-november-18th-2022-rising-operations/

【詳細】

■2022年11月13日 (日)

◆Ukraine says Russian hacktivists use new Somnia ransomware (BleepingComputer, 2022/11/13)
[ウクライナ、ロシアのハッカー集団が新型ランサムウェア「Somnia」を使用と発表]
https://www.bleepingcomputer.com/news/security/ukraine-says-russian-hacktivists-use-new-somnia-ransomware/
⇒ https://malware-log.hatenablog.com/entry/2022/11/13/000000

■2022年11月14日 (月)

◆A Technical Analysis of Royal Ransomware (SecurityScorecard, 2022/11/14)
[Royal Ransomwareのテクニカル分析]
https://securityscorecard.pathfactory.com/research/the-royal-ransomware
⇒ https://malware-log.hatenablog.com/entry/2022/11/14/000000_1

◆New Phobos ransomware variant (PCrisk(Twitter), 2022/11/14)

Ransomware: Phobos
拡張子: .faust, Ransomnote: info.txt / info.hta

https://twitter.com/pcrisk/status/1592036465139236866

◆New STOP ransomware variants (PCrisk(Twitter), 2022/11/14)

Ransomware: STOP
拡張子: .fatp / .fate

https://twitter.com/pcrisk/status/1592075999000367105

◆New Xorist ransomware variant (PCrisk(Twitter), 2022/11/14)

Ransomware: Xorist
拡張子: .ZeRy, Ransomnote: HOW TO DECRYPT FILES.txt

https://twitter.com/pcrisk/status/1592090381663227905

■2022年11月15日 (火)

◆Australia to consider banning paying of ransoms to cyber criminals (ロイター, 2022/11/15 06:37)
[オーストラリア、サイバー犯罪者への身代金支払いを禁止することを検討へ]
https://www.reuters.com/technology/australia-consider-banning-paying-ransoms-cyber-criminals-2022-11-12/
⇒ https://malware-log.hatenablog.com/entry/2022/11/15/000000_2

■2022年11月16日 (水)

◆Suspected Zeus cybercrime ring leader ‘Tank’ arrested by Swiss police (BleepingComputer, 2022/11/16 14:33)
[サイバー犯罪組織「Zeus」のリーダー「Tank」容疑者をスイス警察が逮捕]
https://www.bleepingcomputer.com/news/security/suspected-zeus-cybercrime-ring-leader-tank-arrested-by-swiss-police/
⇒ https://malware-log.hatenablog.com/entry/2022/11/16/000000_1

◆US govt: Iranian hackers breached federal agency using Log4Shell exploit (BleepingComputer, 2022/11/16 11:34)
[米国政府：イラン人ハッカーがLog4Shellの悪用で連邦政府機関に侵入]
https://www.bleepingcomputer.com/news/security/us-govt-iranian-hackers-breached-federal-agency-using-log4shell-exploit/
⇒ https://malware-log.hatenablog.com/entry/2022/11/16/000000_2

◆New VoidCrypt variant (PCrisk(Twitter), 2022/11/16)

Ransomware: VoidCrypt
拡張子: .DRCRM, Ransomnote: Read.txt

https://twitter.com/pcrisk/status/1592786131435032582

◆New Anthraxbulletproof variant (PCrisk(Twitter), 2022/11/16)

Ransomware: Anthraxbulletproof
拡張子: .Anthraxbulletproof, Ransomnote: read_it.txt

https://twitter.com/pcrisk/status/1592789059436687360

■2022年11月17日 (木)

◆Previously unidentified ARCrypter ransomware expands worldwide (BleepingComputer, 2022/11/17 15:07)
[これまで未確認だったランサムウェア「ARCrypter」が全世界に拡大]

Ransomware: ARCrypter
拡張子: .crypt

https://www.bleepingcomputer.com/news/security/previously-unidentified-arcrypter-ransomware-expands-worldwide/
⇒ https://malware-log.hatenablog.com/entry/2022/11/17/000000

◆FBI: Hive ransomware extorted $100M from over 1,300 victims (BleepingComputer, 2022/11/17 14:46)
[FBI ランサムウェア「Hive」は1,300人以上の被害者から1億ドルを搾取した]
https://www.bleepingcomputer.com/news/security/fbi-hive-ransomware-extorted-100m-from-over-1-300-victims/
⇒ https://malware-log.hatenablog.com/entry/2022/11/17/000000_1

◆DEV-0569 finds new ways to deliver Royal ransomware, various payloads (Microsoft, 2022/11/17)
[DEV-0569 は、Royal ランサムウェア、さまざまなペイロードを配信する新しい方法を見つけます]
https://www.microsoft.com/en-us/security/blog/2022/11/17/dev-0569-finds-new-ways-to-deliver-royal-ransomware-various-payloads/
⇒ https://malware-log.hatenablog.com/entry/2022/11/17/000000_2

■2022年11月18日 (金)

◆New Satana ransomware variant (PCrisk(Twitter), 2022/11/18)

Ransomware: Satana
拡張子: .SEX3, Ransomnote: !satana!.txt

https://twitter.com/pcrisk/status/1593497172456230912

【関連まとめ記事】

◆全体まとめ
　◆資料・報告書 (まとめ)

◆The Week in Ransomware (まとめ)
https://malware-log.hatenablog.com/entry/The_Week_in_Ransomware