So-Phish-ticated Attacks
Update: September 16, 2024 Authors: Rui Ataide, Hermes Bojaxhi GuidePoint Security is continuing to monitor this ongoing campaign.
Archive
GRIT Ransomware Report: July 2024
August 15, 2024 Additional contributors to this report: Jason Baker, Justin Timothy, Ryan Silver, and JP Mouton July 2024 yielded some answers to our ongoing questions about the future of ransomware, …
Update from the Ransomware Trenches
August 14, 2024 Authors: Rui Ataide, Hermes Bojaxhi GuidePoint’s DFIR team is frequently called upon to respond to Ransomware incidents.
GRIT Ransomware Report: May 2024
June 13, 2024 Additional contributors to this report: Grayson North, Jason Baker May 2024 closed with an increase in overall victim volume, though deep review reveals that the increase was driven disp…
GRIT Ransomware Report: April 2024
May 16, 2024 Additional contributors to this report: Nic Finn, Grayson North, Justin Timothy April 2024 presented as an outlier amidst the preceding two years of reporting, with notable impacts on ran…
Awkward Adolescence: Increased Risks Among Immature Ransomware Operators
April 11, 2024 Summary.
T-O-X-I-N-B-I-O – Ransomware Recruitment Efforts Following Law Enforcement Disruption
March 20, 2024 Contributors: Jason Baker, Senior Threat Intelligence Consultant; Drew Schmitt, Practice Lead, GRIT This blog expands on observations made as part of GRIT’s February 2024 Ransomware R…
GRIT Ransomware Report: February 2024
March 14, 2024 Additional contributors to this report: Nic Finn, Jason Baker, Justin Timothy, Ryan Silver February 2024 was an utterly chaotic month in the ransomware space.
BianLian GOs for PowerShell After TeamCity Exploitation
March 8, 2024 Contributors: Justin Timothy, Threat Intelligence Consultant, Gabe Renfro, DFIR Advisory Consultant, Keven Murphy, DFIR Principal Consultant Introduction Ever since Avast released a decr…
GRIT Ransomware Report: January 2024
February 15, 2024 Additional contributors to this report: Nic Finn, Grayson North, Jason Baker January saw a decrease in ransomware activity relative to the operations tempo observed throughout Q4 202…
Annual GRIT Ransomware Report – 2023
January 25, 2024 With the conclusion of 2023, the GuidePoint Research and Intelligence Team (GRIT) has compiled our second annual report on ransomware activity over the last year.
GRIT Ransomware Report: November 2023
December 14, 2023 Additional contributors to this report: Nic Finn, Grayson North, Justin Timothy, Ryan Silver November 2023 closed with an increase in posted ransomware victims relative to a quieter …