The Inner Circle

Expand all | Collapse all

Hackbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

  • 1.  Hackbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

    Posted 14 days ago
    https://threatpost.com/hackbit-ransomware-attack-uses-guloader-malicious-microsoft-excel-attachments/156826/

    ------------------------------
    Sean Heide
    Research Analyst
    CSA
    ------------------------------


  • 2.  RE: Hackbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

    Posted 14 days ago
    Hi Sean
    You have valuable information from earlier Proofpoint blog posts [1] and [2] with IOCs.
    Looks like the infamous Thanos ransomware builder is again in the game.
    Regards

    [1] https://www.proofpoint.com/us/blog/threat-insight/hakbit-ransomware-campaign-against-germany-austria-switzerland
    [2] https://www.proofpoint.com/us/threat-insight/post/guloader-popular-new-vb6-downloader-abuses-cloud-services

    ------------------------------
    Olivier Caleff - CSA French Chapter - Chapter Leader - olivier.caleff@cloudsecurityalliance.fr - https://CloudSecurityAlliance.fr
    ------------------------------



  • 3.  RE: Hackbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

    Posted 14 days ago
    Hi Olivier!

    Yeah this seems to be spreading at a decent rate as well. I wonder how long until it transfers to other systems outside of the already named countries. Something to keep an eye on for sure.

    ------------------------------
    Sean Heide
    Research Analyst
    CSA
    ------------------------------