Ransomware

Organizations have been warned by CrowdStrike about the proliferation of a phony recovery manual that has been used to spread the novel Daolpu information-stealing malware.

Bolster's CheckPhish site detected more than 40 phishing and phony lookalike domains created in the first 24 hours following the CrowdStrike incident.

Latin America-based threat operations FLUXROOT and PINEAPPLE have launched Intrusions exploiting Google Cloud infrastructure.

Recent crackdowns on ransomware gangs have splintered threat actors to form their own criminal ventures.

Android users are being targeted via video files in Telegram.

Threat actors immediately launched attacks with malicious payloads to exploit the faulty CrowdStrike Falcon update that resulted in a massive global IT outage.

The ruling dismissed all claims against SolarWinds and Chief Information Security Officer Timothy Brown.