Japan Extradites Russian Qilin-Linked Suspect to Germany
Japan’s police confirmed the detention of a Russian citizen under a German arrest warrant and his extradition to Germany. German authorities link him to the Qilin ransomware group.
Tag ransomware
Warlock Attacks Continue Through On-Premises SharePoint, Symantec Reports
Symantec has observed the continued deployment of Warlock ransomware through vulnerable on-premises Microsoft SharePoint servers. At least four victims include a water utility and a telecommunications provider.
Microsoft analyzes Storm-2570 across ransomware ecosystems
Microsoft described the Storm-2570 actor, linking it to the deployment of four ransomware families and a repeated post-compromise process.
CISA Flags TeamCity Vulnerability as Exploited by Ransomware Actors
According to BleepingComputer, CISA has flagged a vulnerability in JetBrains TeamCity as being exploited by ransomware actors. Fixes and a security patch are available.
ATF Confirms Serious Cybersecurity Incident in Isolated System
The U.S. ATF confirmed an incident in a system separated from its enterprise network. The agency has not yet confirmed Qilin’s involvement or any data breach.