Resources & Insights

3 articles

• 
  Research

  Ransomware Double Extortion and Beyond: REvil, Clop, and Conti

  Ransomware-stricken organizations grapple with multilevel extortion schemes that are advancing at an alarming rate. What exactly happens in these campaigns? We scrutinize three active ransomware families associated with these schemes to find out.

  June 15th, 2021 13 min

  Janus Agcaoili, Miguel Ang, Earle Earnshaw, Byron Gelera…

  Read article →
• 
  Research

  Threat Recap: Darkside, Crysis, Negasteal, Coinminer

  Darkside ransomware surfaced, operators behind Crysis/Dharma released a hacking toolkit, a targeted email campaign was used to propagate Negasteal, and a coinminer was seen bundled with legitimate applications.

  August 19th, 2020 4 min

  Miguel Ang, Raphael Centeno, Don Ovid Ladores, Llallum Victoria…

  Read article →
• 
  Research

  Loki Info Stealer Propagates through LZH Files

  We recently acquired a spam sample that propagates the Loki infostealer through LZH compressed archive files.

  April 28th, 2020 2 min

  Miguel Ang

  Read article →