18 min listen
Noberus ransomware: evolving tactics. [Research Saturday]
FromCyberWire Daily
ratings:
Length:
21 minutes
Released:
Oct 15, 2022
Format:
Podcast episode
Description
Brigid O Gorman from Symantec's Threat Hunter team joins Dave to discuss their research on "Noberus Ransomware - Darkside and BlackMatter Successor Continues to Evolve its Tactics." The research states that Noberus ransomware (aka BlackCat, ALPHV) is more dangerous than ever because attackers have been using new tactics, tools, and procedures in recent months.
In the research, Symantec says, "Among some of the more notable developments has been the use of a new version of the Exmatter data exfiltration tool, and the use of Eamfo, information-stealing malware that is designed to steal credentials stored by Veeam backup software." They go over an in-depth look at how its affiliate program operates.
The research can be found here:
Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics
In the research, Symantec says, "Among some of the more notable developments has been the use of a new version of the Exmatter data exfiltration tool, and the use of Eamfo, information-stealing malware that is designed to steal credentials stored by Veeam backup software." They go over an in-depth look at how its affiliate program operates.
The research can be found here:
Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics
Released:
Oct 15, 2022
Format:
Podcast episode
More Episodes from CyberWire Daily
Bonus Episode: 2024 Cybersecurity Canon Hall of Fame Inductee: Tracers in the Dark by Andy Greenberg. [CSOP] by CyberWire Daily