Cyber alerts

WastedLocker is a newly observed ransomware tool believed to have been created but the TA505 advanced persistent threat group for use in their own campaigns.

CC-3514 Medium

Published Thursday 25 June 2020 (12:00) (updated 29 June 2021)

IndigoDrop Trojan

IndigoDrop is a modular dropper trojan used in sophisticated campaigns against governmental, financial, and military organisations worldwide. It was first identified in the wild in September 2019, although it is believed to have been used in earlier attacks.

CC-3523 Low

Published Thursday 25 June 2020 (12:00) (updated 29 June 2021)

CryCryptor Ransomware

CryCryptor is ransomware that targets Android devices and is disguised as a COVID-19 tracing app. It is based on open-source ransomware called CryDroid that was found published on GitHub, ostensibly for 'research purposes'.

CC-3505 Medium

Published Thursday 18 June 2020 (12:00) (updated 29 June 2021)

Black Kingdom Ransomware

First observed in February 2020, Black Kingdom is a ransomware tool used in targeted attacks organisations in Western Europe, Canada, and the USA with vulnerable Pulse VPN products.

CC-3500 Low

Published Thursday 11 June 2020 (12:00) (updated 29 June 2021)

Zorab Ransomware

Zorab is newly-observed ransomware that is disguised as a decryption tool for STOP (also known as Djvu) ransomware, but actually performs a further encryption on affected files.

CC-3499 Low

Published Thursday 11 June 2020 (12:00) (updated 29 June 2021)

Kupidon Ransomware

Kupidon is newly-observed ransomware that targets Windows systems.