Enterprise Technical Security That Matters - May 21, 2021

Analysis of NoCry ransomware: A variant of the Judge ransomware

Researchers at Tesorion released a decryptor for Judge ransomware that also decrypts files encrypted by the NoCry ransomware. By Pierluigi Paganini I May 18, 2021

Newly Discovered Function in DarkSide Ransomware Variant Targets Disk Partitions

FortiGuard Labs has uncovered additional tactics used by the threat actors that attacked Colonial Pipeline. In this different DarkSide ransomware variant, FortiGuard Labs researchers uncovered an ability to seek out partition information and compromise multiple disk partitions. By Fred Gutierrez I May 17, 2021

MountLocker ransomware uses Windows API to worm through networks

The MountLocker ransomware operation now uses enterprise Windows Active Directory APIs to worm through networks. By Lawrence Abrams I May 19, 2021