Posted on

Ransomware as a Service: The Trending Business Model for Attacks

Ransomware as a Service (RaaS) is the new and trending business model for ransomware attacks. It’s a decentralized and mostly automated mode of distribution to support the fast-growing demands of ransomware operators.

Currently, the attackers behind ransomware campaigns are constantly looking for ways to maximize profit (and minimize the effort). The RaaS framework can be used by anyone, even without any coding skills, as it provides essential tools to implement encryption and communication with command-and-control servers quickly.

Posted on

What Will AI Bring to the Cybersecurity Space in 2022

Over the last year, artificial intelligence (AI) has become a huge part of our everyday lives, which is something of a mixed bag that has brought along a wide variety of both positive and negative influences. On one hand, there are algorithms that are designed to perform a largely marketing-related series of tasks, which are perhaps those best known to individuals outside of the technical space. Think of the algorithms curating your TikTok feed and personalizing suggestions on YouTube. The AI that calculates your fastest morning commute based on virtual maps, your vehicle, and current traffic conditions is also a fairly visible one that has had its share of media attention.

A particular area, though, in which AI has become crucial is cybersecurity. Cybercriminals are increasingly harnessing AI to automate breaches and crack complex systems. Sophisticated, large-scale social engineering attacks and deep fakes are prime examples of this trend. Perhaps more subtle techniques, such as those involving AI-driven data compression algorithms, will soon become an even more important part of the space in the year to come.

Posted on

Malware Distributed in Spoofed Passwordstate Breach Notification Letters

After a supply chain attack that saw the software update feature of the Passwordstate password manager hijacked the threat group developed a convincing phishing campaign targeting enterprise users of the password manager solution.

The attack only lasted 28 hours before it was identified and blocked, but in order to remove the malware from customers’ devices, Click Studios, the developer of the password app, emailed customers and encouraged them to apply a hotfix to remove the malware.