Threat Hunting Archives - Original-Network.com

Aug 24

Akira ransomware infection routine

By Christopher GLEMOT in Backup, Cyber Resiliency, Cybersecurity, Data Protection, Ransomware, SOC

A ransomware gang named “Akira” was discovered on the Dark Web this year. Cybersecurity experts have uncovered new technical details about the Akira ransomware, shedding light on the workings of this latest threat to the digital world. Here’s a blog post on the infection routine.

Akira, Blue Team, Dark Web, Ransomware, Ransomware as a Service, Reverse, SOC, Threat Hunting

Nov 27

Play ransomware infection routine

By Christopher GLEMOT in Backup, CERT, Ransomware, SOC

A ransomware gang named “Play” was discovered on the Dark Web. Along with them, a list of 22 victims has been revealed. There is a piece of evidence that points to a possible connection between Play ransomware and Quantum ransomware, which is an offshoot of the notorious Conti ransomware group. The Cobalt Strike beacons that …

Blue Team, Cartel, Dark Web, Play, Ransomware as a Service, Reverse, SOC, SOC Analyst, Threat Hunting

Nov 24

Identify a piece of malware with Yara

By Christopher GLEMOT in Malware, Ransomware, Security, SOC

Yara rules classify and identify malware samples by creating descriptions of malware families (it is a tool used to identify files, based on textual or binary pattern). YARA rules are like a piece of programming language, they work by defining a number of variables that contain patterns found in a sample of malware. If some …