ransomware

cobaltstrike, conti, icedid, ransomware

Conti Ransomware

May 12, 2021

revil Sodinokibi adfind

revil, Sodinokibi, adfind, cobaltstrike, icedid, ransomware

Sodinokibi (aka REvil) Ransomware

March 29, 2021

ryuk adfind bazar

ryuk, adfind, bazar, cobaltstrike

Bazar, No Ryuk?

January 31, 2021

mespinoza empire koadic

mespinoza, empire, koadic, psexec, ransomware, rdp

PYSA/Mespinoza Ransomware

November 23, 2020

ryuk adfind bazar

ryuk, adfind, bazar, cobaltstrike, ransomware

Ryuk Speed Run, 2 Hours to Ransom

November 5, 2020

ryuk adfind bazar

ryuk, adfind, bazar, cobaltstrike, ransomware, rdp, yara

Ryuk in 5 Hours

October 18, 2020

ryuk adfind bazar

ryuk, adfind, bazar, cobaltstrike, ransomware

Ryuk's Return

October 8, 2020

adfind cobaltstrike psexec

adfind, cobaltstrike, psexec, ransomware, rdp

NetWalker Ransomware in 1 Hour

August 31, 2020

ransomware rdp

ransomware, rdp

Ransomware Again...But We Changed the RDP Port!?!?!

July 13, 2020

Meterpreter ransomware rdp

Meterpreter, ransomware, rdp, yara

Snatch Ransomware

June 21, 2020

Access DFIR Labs Book a Demo

The DFIR Report provides in-depth, real-world intelligence based on observed intrusions, enabling security analysts and teams  to strengthen defenses, enhance detection,  and accelerate response.