Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Razorthorn

The Billion Dollar Cost of Cybercrime: Lessons from the LockBit Takedown

Feb 27, 2024 By James Rees In Razorthorn
The recent LockBit group take down has shown the world at large the cost of cybercrime. Initially it was reported that just over $100 million had been gathered through the nefarious acts of this particular group but, as I suspected, that initial figure was just a drop in the ocean. It turns out that the real figure was in excess of $1 billion dollars over the last four years, and I still suspect this may be more.
Read Post
splunk

Unveiling Phemedrone Stealer: Threat Analysis and Detections

Feb 27, 2024 By Teoderick Contreras In Splunk
Recently, the cybersecurity world has been abuzz with discussions about Phemedrone, a newly emerged stealer exploiting the CVE-2023-36025 vulnerability in Microsoft Windows Defender SmartScreen. The project was most recently available on GitHub; however, the project was taken down, and the associated account was removed. Active development still occurs via Telegram.
Read Post

The 443 Podcast - Episode 281 - Locking Up LockBit

Feb 26, 2024 By WatchGuard In WatchGuard
This week on the podcast, we cover an international law enforcement takedown of the LokBit ransomware group's infrastructure. After that, we cover a novel malware delivery vector involving an IoT "toy." We end the podcast by covering the latest White House Executive Order addressing cybersecurity in critical infrastructure. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.
View Video
knowbe4

Face off: New Banking Trojan steals biometrics to access victims' bank accounts

Feb 23, 2024 By Stu Sjouwerman In KnowBe4
Venturebeat had the scoop on a fresh Group-IB report. They discovered the first banking trojan that steals people’s faces. Unsuspecting users are tricked into giving up personal IDs and phone numbers and are prompted to perform face scans. These images are then swapped out with AI-generated deepfakes that can easily bypass security checkpoints.
Read Post
Arctic Wolf

Operation Cronos: The Takedown of LockBit Ransomware Group

Feb 22, 2024 By Stefan Hostetler In Arctic Wolf
On February 20, 2024, the National Crime Agency (NCA) of Britain and the Federal Bureau of Investigation (FBI) announced the successful disruption of the Lockbit ransomware gang, marking a significant milestone in the fight against cybercrime. This operation, known as Operation Cronos, was a collaborative effort involving law enforcement agencies from the UK, the US, and several other countries, with support from private sector partners.
Read Post
SecurityScorecard

Beating LockBit at its Own Game: Law enforcement's takedown of a prolific ransomware group

Feb 22, 2024 By SecurityScorecard In SecurityScorecard
After a years-long investigation, this week the FBI and law enforcement agencies in the UK and Europe took over the main website of the cybercrime group known as LockBit. Law enforcement additionally arrested LockBit associates in Poland, Ukraine, and the U.S. and the U.S. Treasury imposed sanctions on Russian nationals affiliated with the group. The joint operation re-engineered LockBit’s online system to mimic the countdown clock used by the group in its extortion attempts.
Read Post
CrowdStrike

Still Alive: Updates for Well-Known Latin America eCrime Malware Identified in 2023

Feb 22, 2024 By Kevin Ratto In CrowdStrike
Latin America (LATAM) is a growing market, and threat actors have used numerous eCrime malware variants to target users in this region. Over the past few years, many researchers have characterized the tactics, techniques and procedures (TTPs) of widespread Latin America malware families, including but not limited to Mispadu, Grandoreiro, Mekotio, Casbaneiro, Metamorfo and Astaroth.
Read Post
tripwire

Bring us the head of LockBit! $15 million bounty offered for information on leaders of notorious ransomware gang

Feb 22, 2024 By Graham Cluley In Tripwire
A huge reward is being offered for information leading to the identification or location of any of the leaders of the LockBit ransomware gang. The bounty offer comes from the US State Department, following this week's disruption of the criminal organisation's activities. LockBit, which has been operating since 2020, has targeted thousands of victims around the globe, causing the loss of billions of dollars in both ransom payments and recovery.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.