Threat intelligence
The Gentlemen Ransomware Group: Krebs Investigates the Second-Most Active Gang
Krebs on Security has published an investigation into the administrator behind The Gentlemen ransomware group, which has climbed to second most active ransomware gang by victim count. The group recruits affiliates at a 90 percent revenue share — well above the 70-80 percent standard at most RaaS operations. That above-market rate has attracted experienced operators […]
Microsoft Disrupts Malware-Signing Service That Issued 1,000+ Code-Signing Certificates
Microsoft’s Digital Crimes Unit (DCU) disrupted a malware-signing-as-a-service operation that gave ransomware crews legitimate-looking code-signing certificates straight from Microsoft’s Azure Artifact Signing platform, according to the BleepingComputer report. Buyers paid $5,000 to $9,000 in bitcoin to a Telegram seller called SamCodeSign and walked away with signed binaries that Windows treated as trusted software. Fox Tempest, […]
