Tag: LockBit ransomware attacks

Russians plead guilty to involvement in LockBit ransomware attacks
News

Russians plead guilty to involvement in LockBit ransomware attacks

Two Russian nationals acknowledged taking part in many LockBit ransomware operations that affected victims both domestically and abroad. Ruslan Magomedovich Astamirov, a Russian national, and Mikhail Vasiliev, a Canadian-Russian national, were both associated with LockBit's ransomware-as-a-service enterprise, according to a press release issued by the Justice Department on Thursday. Affiliates of LockBit, such as Vasiliev and Astamirov, would locate weak points in victims' networks, exploit them to obtain private information, and assist in encrypting files with ransomware payloads. Then, they would threaten to delete the stolen data, keep it off the internet, and decrypt the victims' files in return for a ransom read more about Russians plead guilty to involvement in LockBit rans...
ScreenConnect servers hacked in LockBit ransomware attacks
News

ScreenConnect servers hacked in LockBit ransomware attacks

Attackers are infecting unpatched ScreenConnect servers with LockBit ransomware payloads by taking advantage of a maximum severity authentication bypass vulnerability. Since Tuesday, when many cybersecurity organizations published proof-of-concept exploits and ConnectWise delivered security fixes, the highest severity CVE-2024-1709 auth bypass flaw has been actively exploited. Additionally, ConnectWise addressed the high-severity path traversal vulnerability (CVE-2024-1708), which is only exploitable by highly privileged threat actors.Due to two security flaws that affect all ScreenConnect versions, the business decided to eliminate all license limitations on Wednesday. This will let customers whose licenses have expired to update to the most recent version of the software and p...