Latest Encryption news

Rafel RAT targets outdated Android phones in ransomware attacks

An open-source Android malware named 'Rafel RAT' is widely deployed by multiple cybercriminals to attack outdated devices, some aiming to lock them down with a ransomware module that demands payment on Telegram.
- Bill Toulas
- June 22, 2024
- 10:19 AM
- 1
Linux version of RansomHub ransomware targets VMware ESXi VMs

The RansomHub ransomware operation is using a Linux encryptor designed specifically to encrypt VMware ESXi environments in corporate attacks.
- Bill Toulas
- June 20, 2024
- 03:00 PM
- 0
New Fog ransomware targets US education sector via breached VPNs

A new ransomware operation named 'Fog' launched in early May 2024, is using compromised VPN credentials to breach the networks of educational organizations in the U.S.
- Bill Toulas
- June 06, 2024
- 02:29 PM
- 0
New ShrinkLocker ransomware uses BitLocker to encrypt your files

A new ransomware strain called ShrinkLocker creates a new boot partition to encrypt corporate systems using Windows BitLocker.
- Ionut Ilascu
- May 24, 2024
- 10:59 AM
- 0
LastPass is now encrypting URLs in password vaults for better security

LastPass announced it will start encrypting URLs stored in user vaults for enhanced privacy and protection against data breaches and unauthorized access.
- Bill Toulas
- May 22, 2024
- 01:04 PM
- 3
New attack leaks VPN traffic using rogue DHCP servers

A new attack dubbed "TunnelVision" can route traffic outside a VPN's encryption tunnel, allowing attackers to snoop on unencrypted traffic while maintaining the appearance of a secure VPN connection.
- Bill Toulas
- May 07, 2024
- 02:46 PM
- 0
Microsoft fixes bug behind incorrect BitLocker encryption errors

Microsoft has fixed a known issue causing incorrect BitLocker drive encryption errors in some managed Windows environments.
- Sergiu Gatlan
- April 29, 2024
- 11:04 AM
- 0
Google Meet opens client-side encrypted calls to non Google users

Google is updating the client-side encryption mechanism for Google Meet to allow external participants, including those without Google accounts, to join encrypted calls.
- Bill Toulas
- April 24, 2024
- 11:44 AM
- 0
StopCrypt: Most widely distributed ransomware evolves to evade detection

A new variant of StopCrypt ransomware (aka STOP) was spotted in the wild, employing a multi-stage execution process that involves shellcodes to evade security tools.
- Bill Toulas
- March 14, 2024
- 04:59 PM
- 3
Tuta Mail adds new quantum-resistant encryption to protect email

Tuta Mail has announced TutaCrypt, a new post-quantum encryption protocol to secure communications from powerful and anticipated decryption attacks.
- Bill Toulas
- March 11, 2024
- 05:21 PM
- 2
DuckDuckGo browser gets end-to-end encrypted sync feature

The DuckDuckGo browser has unveiled a new end-to-end encrypted Sync & Backup feature that lets users privately and securely synchronize their bookmarks, passwords, and Email Protection settings across multiple devices.
- Bill Toulas
- February 14, 2024
- 08:00 AM
- 0
Kasseika ransomware uses antivirus driver to kill other antiviruses

A recently uncovered ransomware operation named 'Kasseika' has joined the club of threat actors that employs Bring Your Own Vulnerable Driver (BYOVD) tactics to disable antivirus software before encrypting files.
- Bill Toulas
- January 23, 2024
- 02:58 PM
- 0
China claims it cracked Apple's AirDrop to find numbers, email addresses

A Chinese state-backed research institute claims to have discovered how to decrypt device logs for Apple's AirDrop feature, allowing the government to identify phone numbers or email addresses of those who shared content.
- Lawrence Abrams
- January 09, 2024
- 04:46 PM
- 0
New Black Basta decryptor exploits ransomware flaw to recover files

Researchers have created a decryptor that exploits a flaw in Black Basta ransomware, allowing victims to recover their files for free.
- Lawrence Abrams
- December 30, 2023
- 10:14 AM
- 0
Terrapin attacks can downgrade security of OpenSSH connections

Academic researchers developed a new attack called Terrapin that manipulates sequence numbers during the handshake process to breaks the SSH channel integrity when certain widely-used encryption modes are used.
- Bill Toulas
- December 19, 2023
- 12:03 PM
- 0
Vans and North Face owner VF Corp hit by ransomware attack

American global apparel and footwear giant VF Corporation, the owner of brands like Supreme, Vans, Timberland, and The North Face, has disclosed a security incident that caused operational disruptions.
- Bill Toulas
- December 18, 2023
- 01:56 PM
- 0
Easily encrypt your files with the $29.99 GhostVolt encryption software

If you want to keep your files safe, GhostVolt Encryption Software offers plans that give everyday users protection without a cumbersome interface or recurring cost.
- BleepingComputer Deals
- December 14, 2023
- 07:19 AM
- 0
Ransomware attack on indie game maker wiped all player accounts

A ransomware attack on the "Ethyrial: Echoes of Yore" MMORPG last Friday destroyed 17,000 player accounts, deleting their in-game items and progress in the game.
- Bill Toulas
- November 27, 2023
- 03:06 PM
- 1
FBI shares tactics of notorious Scattered Spider hacker collective

The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency released an advisory about the evasive threat actor tracked as Scattered Spider, a loosely knit hacking collective that now collaborates with the ALPHV/BlackCat Russian ransomware operation..
- Bill Toulas
- November 16, 2023
- 04:55 PM
- 0
Google Chrome now auto-upgrades to secure connections for all users

Google has taken a significant step towards enhancing Chrome internet security by automatically upgrading insecure HTTP requests to HTTPS requests for 100% of users.
- Mayank Parmar
- October 30, 2023
- 02:31 PM
- 0