Qqmt Ransomware

While checking the VirusTotal page for recently submitted malware samples, we discovered a new Djvu ransomware called Qqmt. Malware of this type encrypts files to force victims to pay for a decryption tool. Usually, ransomware also provides a ransom note and modifies filenames. Qqmt drops the "_readme.txt" file and appends the ".qqmt" extension to filenames. An example of how files encrypted by Qqmt are renamed: "1.jpg" is renamed to "1.jpg...

Lazarus Still Determined to Steal Your Crypto

The North Korean state-sponsored threat actor Lazarus has long brought the definitions used by security researchers into doubt. Typically, state-sponsored groups are not financially motivated but motivated by the policies and aims of their state overlords. Lazarus is both in a sense that not only do they conduct cyber espionage and campaigns to further North Korea’s geopolitical ambitions but will also attempt to complete financially motiv...