A group of unknown financially motivated threats is using the self-proclaimed Hades ransomware variant in cybercrime operations that have affected at least three victims since December 2020. This group of cybercriminals appears to be demanding of their targets and primarily persecutes organizations with a focus on manufacturing, especially those in the automotive supply chain, as well as those with insulation products.<\/p>\n\n\n\n
The locations of the attack were slightly dispersed as each of the companies was global in their operational footprints, although these organizations were affected in multiple geographies, it is understood that the ransomware attack was focused on Canada, Germany, Luxembourg, Mexico. and the United States.<\/p>\n\n\n\n
Hades set of tools and approaches include several that are often used by spy-related threat actors – for example, the researchers said the group leveraged valid accounts in all victim settings, including accounts from service and privilege administrator accounts used by the threat actor.<\/p>\n\n\n\n
It is thought that the group behind Hades searched local databases and file systems to find files of interest and confidential data prior to the exfiltration and also searched and collected data from shared networks on remote systems. Common targets for this were accessible shared directories on file servers.<\/p>\n\n\n\n
The main industries affected by this threat would be:<\/p>\n\n\n\n
\u25b8Transport company<\/em><\/strong><\/p>\n\n\n\n \u25b8Consumer Products Company<\/em><\/strong><\/p>\n\n\n\n \u25b8Manufacturing and distribution company<\/em><\/strong><\/p>\n\n\n\n Check also: A group of unknown financially motivated threats is using the self-proclaimed Hades ransomware variant in cybercrime operations that have affected at least three victims since December 2020. This group of cybercriminals appears to be demanding of their targets and primarily persecutes organizations with a focus on manufacturing, especially those in the automotive supply chain, as […]<\/p>\n","protected":false},"author":1,"featured_media":3097,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,16],"tags":[36,105],"class_list":["post-3096","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-ransomware","tag-cybersecurity","tag-ransomware"],"yoast_head":"\n
DoppelPaymer \u2013 Ransomware targeting industries<\/a>
Netwalker Ransomware that uses the fear on Covid<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"