QakBot reducing its on disk artifacts

Summary QakBot has been updated with more evasion techniques. QakBot’s configuration is now stored in a registry key instead of a file. The run key for persistence is not permanently present in the registry but only written right before shutdown or reboot, and...

QakBot reducing its on disk artifacts

Summary QakBot has been updated with more evasion techniques. QakBot’s configuration is now stored in a registry key instead of a file. The run key for persistence is not permanently present in the registry but only written right before shutdown or reboot, and...

Cruise line operator Hurtigruten crippled in ransomware attack

IT systems worldwide said to be affectedBusiness, already suffering during pandemic, now has a cyber attack to contend with Norwegian shipping and cruise line Hurtigruten has revealed it is the latest maritime firm to suffer at the hands of cybercriminals, following a...