CyberVolk, a ransomware-as-a-service provider with pro-Russian links, has emerged as a major new hacktivist group, blending political and financial cybercrime. Described by SentinelLabs, the group, formerly known as GLORIAMIST and Solntsevskaya, conducts financially motivated attacks citing geopolitical motives as justification. It also uses code from other hacktivist groups and has shifted from DDoS attacks to ransomware. CyberVolk’s operations, rivalry with other groups, and reuse of leaked ransomware code contribute to the growing complexity of ransomware landscape.
Researchers discover first UEFI bootkit malware for Linux
Named “Bootkitty”, the first UEFI bootkit targeting Linux systems has been detected by ESET researchers. Operating before the system’s boot process begins enables Bootkitty to