What is Space Bears? Space Bear is a relatively new ransomware group that first appeared on the radar in April 2024. The gang, which is aligned to the Phobos ransomware-as-a-service group, steals sensitive data from organisations, encrypts victims’ computer systems, and demands that a ransom be paid for a decryption key or the data will … Read more
A recent announcement from an individual claiming affiliation with the LockBit ransomware gang signals a potential resurgence of the cyber criminal group’s activities, with a new phase supposedly launching in February 2025. Despite the significant disruption caused by the National Crime Agency’s (NCA) Operation Cronos in early 2024, which dismantled much of LockBit’s infrastructure, the … Read more
Ransomware criminals in 2024 stooped to new lows and high-level black hat trade craft. Targets included critical industries such as healthcare, public infrastructure, and the cloud. Notable was the rise of ransomware-as-a-service (RaaS), allowing a new class of rookie attackers to perpetrate devastating campaigns. Meanwhile nation-state actors transformed ransomware into a tool for geopolitical weapon. … Read more
Deloitte and Rhode Island officials confirmed that a ransomware attack by Brain Cipher impacted public benefits data from the state’s RIBridges system. The Brain Cipher ransomware group initially listed Deloitte UK as a victim on its dark web leak site in early December, prompting Deloitte to respond saying only one client system outside of Deloitte’s … Read more
What is 3AM? 3AM (also known as ThreeAM) is a ransomware group that first emerged in late 2023. Like other ransomware threats, 3AM exfiltrates victims’ data (threatening to release it publicly unless a ransom is paid) and encrypts the copies left on targeted organisations’ computer systems. So it’s the normal story with ransomware – exfiltrate, … Read more
