X/Twitter (@TrendMicroRSRCH) Jan 2024
Thread
Werewolves: Investigating a New Ransomware Player
Ransomware
Thread investigating the newly identified Werewolves ransomware group after an external researcher's blog post caught the Threat Hunting team's attention.
Related Research
Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques
Discovered Agenda ransomware deploying Linux variants on Windows systems via remote management tools and BYOVD techniques for cross-platform evasion.
RansomwareCross-Platform
Agenda Ransomware Group Adds SmokeLoader and NETXLOADER to Their Arsenal
Uncovered Agenda ransomware group adopting SmokeLoader and a new loader named NETXLOADER for improved delivery and evasion.
RansomwareDefense Evasion
Cerber Ransomware Exploits Atlassian Confluence Vulnerability CVE-2023-22518
Documented Cerber ransomware operators rapidly weaponizing CVE-2023-22518 in Atlassian Confluence for initial access and encryption deployment.
RansomwareDefense Evasion
CrazyHunter Campaign Targets Taiwanese Critical Sectors
Identified CrazyHunter targeting Taiwanese healthcare and education using 80% open-source tooling and BYOVD attacks.
RansomwareTaiwan