ML models have recommended themselves as a powerful tool for cyberdefense. AI/ML is heavily used in antiviruses (EDR), Next-Gen Firewalls, a...

[Authors: Viktoria Taran, Alexander Adamov ] The Ryuk ransomware seen for the first time in August 2018 has been successfully used...

[Authors: Viktoria Taran, Alexander Adamov ] GermanWiper was first seen on the BleepingComputer forum on July 30, 2019. After analy...

Norsk Hydro back in 1905.  Source: https://commons.wikimedia.org/wiki/File:Rjukan_fabrikker_-_Norsk_Hydro.jpg This week BleepingC...

It's always very exciting for me to be able to attend and, moreover, speak at the  Virus Bulletin Conference . Because, it is t...

In the light of the growing number of ransomware attacks in which cryptolockers terminate database processes to unlock the database fi...

After analysis of the MoneroPay ransomware (MD5:  14ea53020b4d0cb5acbea0bf2207f3f6 ), we managed to patch the binary to turn it into a de...

BadRabbit launched on the morning of Tuesday, October 24, 2017 was delivered through drive-by downloads of the fake Adobe Flash Player i...

The new Octopus cryptolocker being an offspring of the Serpent/Zyklon/WildFire/HadesLocker families shows that .NET ransomware can be not...

Similar to Cerber (Ferber) ransomware , Spora has its own intricate encryption file format and does not encrypt the whole file. The encr...

This summer Cerber is on duty. It comes via spear-phishing emails, bypasses antiviruses leveraging  polymorphic encryption and API calls ...

The new modification of Petya, which we named EternalPetya (because of using EternalBlue and EternalRomance exploits), caused surprisingly...

On May 18, the author(s) of XData ransomware ran the massive attack against Ukrainian users supposedly leveraging the EternalBlue exploit...

During the last decade, ransomware (cryptolockers) show sustainable growth that can be explained by an effective business model that i...

WannaCry (WannaCryptor) is becoming probably the most popular cryptolocker in the history of ransomware. It has nothing new in terms of f...

New Cerber ransomware comes through parcel delivery notifications with zip attachments.

After revealing the fake emails with finance related information from banks and the Tax Office in Ukraine delivering ransomware, we re...

We are seeing the numerous infections by the new version of the Shade cryptolocker during the last week in Ukraine. The Shade has been...

Recently, our laboratory analyzed the new version of DeriaLock ( MD5: 0a7b70efba0aa93d4bc0857b87ac2fcb ). This version of DeriaLock is...

During the last several months Ukrainian Cyberpolice recorded many incidents all over the country with VaultCrypt. We decided to shed light...