VoicePlus Blog

2021-006: ACSC Ransomware Profile - Lockbit 2.0

ACSC has observed an increase in reporting of LockBit 2.0 ransomware incidents in Australia. The LockBit ransomware restricts access to corporate files and systems by encrypting them into a locked and unusable format. Victims receive instructions on how to engage with the offenders after encryption. LockBit affiliates have successfully deployed ransomware on corporate systems in a variety of countries and sectors, including Australia, where the ACSC is aware of numerous incidents since 2020. LockBit affiliates are known to implement the ‘double extortion’ technique by uploading stolen and sensitive victim information to their dark web site ‘LockBit 2.0’, and threatening to sell and/or release this information if their ransom demands are not met.

Cybercriminals targeting construction companies to conduct email scams

Cybercriminals are targeting construction companies to conduct business email compromise scams. All parties to construction projects should be vigilant when emailing about invoices and bank details.

ACSC - Security Update - Chrome Browser

Google released Chrome version 91.0.4472.114 for Windows, Mac, and Linux. The patch notes for this version can be viewed at Chrome Release Note.

ENCRYPTION - What does it Mean

Encryption Whenever you send private data to another computer or server on the internet, which happens many times a day, thereis some risk involved. It's a bit like Little Red Riding Hood's mother sending her to her grandmother's house on the other side of the woods. Those woods, which she has to cross alone without defence, have an assortment of dangers.

Ongoing campaign using Avaddon Ransomware - 2021-003:

The Australian Cyber Security Centre (ACSC) is aware an ongoing ransomware campaign utilising the Avaddon Ransomware malware. This campaign is actively targeting Australian organisations in a variety of sectors. This advisory provides details of Avaddon threat actors, dark web activity, targeted countries and sectors, the malware infection chain, and known Techniques, Tools, and Procedures (TTPs). If activity is identified relating to this advisory please report any findings to the ACSC.

Pradeo and Samsung join forces - protect mobile devices

Pradeo’s Mobile Threat Defense services are now integrated with Knox Manage, Samsung’s mobile device management (MDM) solution available with Knox Suite. Starting today, organizations can simply automate the protection of their mobile fleet, knocking out in a few clicks all the increasing cyberthreats (such as malware or data exfiltration) targeting enterprise mobility.