Norsk Hydro back in 1905.  Source: https://commons.wikimedia.org/wiki/File:Rjukan_fabrikker_-_Norsk_Hydro.jpg This week BleepingC...

After analysis of the MoneroPay ransomware (MD5:  14ea53020b4d0cb5acbea0bf2207f3f6 ), we managed to patch the binary to turn it into a de...

The new Octopus cryptolocker being an offspring of the Serpent/Zyklon/WildFire/HadesLocker families shows that .NET ransomware can be not...

Similar to Cerber (Ferber) ransomware , Spora has its own intricate encryption file format and does not encrypt the whole file. The encr...

This summer Cerber is on duty. It comes via spear-phishing emails, bypasses antiviruses leveraging  polymorphic encryption and API calls ...

The undetected PowerShell ransomware was used to attack the popular German car dealer. The attack launched through the spear phishing ema...

The new modification of Petya, which we named EternalPetya (because of using EternalBlue and EternalRomance exploits), caused surprisingly...

On May 18, the author(s) of XData ransomware ran the massive attack against Ukrainian users supposedly leveraging the EternalBlue exploit...

During the last decade, ransomware (cryptolockers) show sustainable growth that can be explained by an effective business model that i...

WannaCry (WannaCryptor) is becoming probably the most popular cryptolocker in the history of ransomware. It has nothing new in terms of f...

New Cerber ransomware comes through parcel delivery notifications with zip attachments.

We are seeing the numerous infections by the new version of the Shade cryptolocker during the last week in Ukraine. The Shade has been...

Recently, our laboratory analyzed the new version of DeriaLock ( MD5: 0a7b70efba0aa93d4bc0857b87ac2fcb ). This version of DeriaLock is...

During the last several months Ukrainian Cyberpolice recorded many incidents all over the country with VaultCrypt. We decided to shed light...