Redhotcyber · @redhotcyber
513 followers · 1287 posts · Server mastodon.bida.imBuhti, il ransomware democratico. Colpisce sia Windows e Linux: ora da che parte stai?
Una nuova operazione #ransomware chiamata #Buhti utilizza il #codice trapelato delle famiglie di #ransomware #LockBit e #Babuk per attaccare i #sistemi #Windows e #Linux.
Gli aggressori dietro Buhti, tracciati dai #ricercatori di sicurezza come #Blacktail, pur non sviluppando una propria variante di #ransomware, hanno creato uno strumento di estrazione #dati personalizzato che viene utilizzato per ricattare le vittime.
#redhotcyber #informationsecurity #ethicalhacking #dataprotection #hacking #cybersecurity #cybercrime #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #privacy #infosecurity
#ransomware #buhti #codice #lockbit #babuk #sistemi #windows #linux #ricercatori #Blacktail #dati #redhotcyber #informationsecurity #ethicalhacking #dataprotection #hacking #cybersecurity #cybercrime #CyberSecurityAwareness #cybersecuritytraining #CyberSecurityNews #privacy #infosecurity
Aida Akl · @AAKL
295 followers · 596 posts · Server noc.socialOrganizations Worldwide Targeted in Rapidly Evolving #Buhti #Ransomware Operation #cybersecurity https://www.securityweek.com/organizations-worldwide-targeted-in-rapidly-evolving-buhti-ransomware-operation/ @SecurityWeek
#cybersecurity #ransomware #buhti
Brad · @malware_traffic
2321 followers · 124 posts · Server infosec.exchange
Images with more info on bitcoin payment support site satoshidisk[.]com used by the #Buhti #ransomware folks for their payment page.
Brad · @malware_traffic
2320 followers · 122 posts · Server infosec.exchange
Originally posted at: https://twitter.com/Unit42_Intel/status/1626258145868763137
My follow-up tweet: https://twitter.com/malware_traffic/status/1626330366700146688
Kudos to my Palo Alto Networks colleagues who found and reported this #Buhti #Ransomware ELF binary! Sample now available at https://bazaar.abuse.ch/sample/01b09b554c30675cc83d4b087b31f980ba14e9143d387954df484894115f82d4/.
Payment page uses SatoshiDisk[.]com, a bitcoin payment support site currently hosted on Cloudflare IP.