Rapid7’s Post

Picture this: One minute, you’re checking your email, and the next, your files become encrypted, leaving a ransom note text file in every folder. Aishwarya Gentyal from our Trellix Advanced Research Center shares insight into one of the latest ransomware campaigns targeting high-profile victims. Check out the findings here. Stay protected: https://bit.ly/3xPEWGo

Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion. The threat actors associated with the Medusa ransomware have ramped up their activities following the debut of a dedicated data leak site on the dark web in February 2023 to publish sensitive data of victims who are unwilling to agree to their demands. “As part of their multi-extortion strategy, this group will provide victims with multiple options when their data is posted on their http://ow.ly/2cCp1058BQ8 #InceptusSecure #UnderOurProtection

imagine what having a rollback capabilities can do for your organisation

Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion. The threat actors associated with the Medusa ransomware have ramped up their activities following the debut of a dedicated data leak site on the dark web in February 2023 to publish sensitive data of victims who are unwilling to agree to their demands. “As part of their multi-extortion strategy, this group will provide victims with multiple options when their data is posted on their http://ow.ly/2cCp1058BQ8 #InceptusSecure #UnderOurProtection

Explore the latest insights on Cactus ransomware in our new blog post. stay informed and prepared against emerging cybersecurity threats. #Ransomware #DataProtection #CactusRansomware

Big news dropped today - LockBit no longer!! Join us tomorrow at 10AM ET for a live threat briefing on the LockBit ransomware takedown and taking live Q&A from the audience. The discussion will be led by experts Allan Liska, Dmitry Smilyanets and Alexander Leslie of Recorded Future. What to expect:  - A brief background on LockBit ransomware group and their history as one of the world’s most harmful cybercriminal groups  - The takedown of LockBit including who conducted it and how it happened  - The impact of this takedown on the overall ransomware market  - The potential for LockBit to resurface in the future Register today: https://lnkd.in/eGT37ZEJ

Join tomorrow’s live LockBit threat briefing!

A couple of thoughts. 1 - We are seeing a lot of small and medium-size businesses being dumped on extortion sites. I doubt that this is happening because these companies are better prepared to deal with ransomware. Likely, they just don't feel they have the funds to deal with the incident. (I hope I'm wrong.) 2 - Whatever the ransomware operators are making from the victims, they are also auctioning off at least some of the data they are stealing for additional profit.

Are there gaps in your Zero Trust strategy? Meet with us at #GartnerSEC to learn more about stopping the spread of ransomware with microsegmentation. https://ow.ly/8xh650RPArK

23 new ransomware groups vs. 25 new ransomware groups. Similar, right? Except 23 ransomware groups were created in the whole of 2023 and 25 have been created since the beginning of 2024 and we are only in the middle of Q2. The Cyberint research team has been following this trend closely and has released a report detailing the developments: https://hubs.la/Q02y8-7V0