Threat actor Vice Society, known by Microsoft as Vanilla Tempest, is increasingly utilising Inc ransomware in its attacks on American healthcare organisations. The group, which has been active since July 2022, uses a variety of ransomware types to facilitate its double extortion attacks. It initially gains access to victims with the Gootloader backdoor-loader, before manipulating other programs to drop the Inc ransomware. Healthcare is reportedly the industry most likely to be targeted by ransomware attacks, experiencing an average of 2,018 attacks globally per week.
Ever wonder how crooks get the credentials to unlock stolen phones?
A coalition of law enforcement agencies led by Europol’s European Cybercrime Center shut down iServer, a phishing-as-a-service platform operating from Argentina since 2018. The Argentina-based