X-Industry

Activity Summary - Week Ending 19 March 2021:

• Pharmacie Midombo in Benin has some Problems
• Cuck, a Movie title, or a Dangerous Lure
• Analysts identified 26,343 connections from new unique IP addresses checking into our Sinkholes
• Red Sky Alliance observed 17 new unique email accounts compromised with Keyloggers
• Analysts identified 2,157 new IP addresses participating in various Botnets
• DearCry Ransomware
• GoldMax, GoldFinder, and Sibot
• PYSA Ransomware attacking Education
• Düsseldorf University Hosp

It should come as no reprise that ransomware groups that steal a company's data and then get paid a fee to delete it don't always follow through on their promise.

The number of cases where this has happened has increased, according to a report[1] published by Coveware this week and according to several incidents shared by security researchers with ZDNet researchers over the past few months. These incidents take place only for a certain category of ransomware attacks — namely those carried out by