DarkVault, a new ransomware group, is suspected of copying the notorious ransomware-as-a-service (RaaS) gang LockBit. DarkVault’s website design resembles LockBit’s, including a similar logo. Security researcher Dominic Alvieri first highlighted the imitation, but later clarified that his remark was meant to mock the “copycats”. DarkVault is just one of several groups leveraging LockBit’s leaked ransomware builder for their own cyberattacks.
New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth
An updated version of a malware loader, known as Hijack Loader, has been discovered with new features aimed at evading detection and maintaining persistence. The
