Cradlepoint Threat Intelligence Hot Shots: Episode 7 - RansomHub

In this episode of Cradlepoint's weekly Threat Intelligence Hot shots, presented by the Cradlepoint threat intelligence team and featuring senior analyst Alex Ryan. They discuss the emergence of a new ransomware group called RansomHub, which has quickly become a major player in the ransomware landscape due to its veteran operators and fast expansion. The malware is highly obfuscated and difficult to detect, and its advanced features include rebooting devices into safe mode to avoid detection by host-based detections and EDRs. The best defense is to patch active directory servers and use browser isolation to prevent initial access.
This week we looked at:
Black Frog www.blackfog.c...
www.threatdown... ​
symantec-enter...
​
x.com/DarkWebI...
​x.com/AlvieriD... ​
​www.darkreadin...
​
Secura whitepaper on CVE-2020-1472 www.secura.com...
New source: NCC Group Research Blog research.nccgr...