- Published
- Source
- DataBreaches.net
- Filed under
- Data breaches, Ransomware, Law & courts
DataBreaches has reported on a group known as KillSec for almost two years. This time, we get to report on their arrest. The European Union Agency for Criminal Justice Cooperation issued this press release today: An international group of authorities from nine countries, coordinated by Eurojust and Europol, has successfully shut down a ransomware group……
What defenders check after a story like this
- Backups kept offline or immutable – and a restore you have actually tested.
- Multi-factor authentication on every remote way in, with VPNs and firewalls patched first.
- Alerts for the warning signs: new admin accounts, security tools switched off, mass file changes, large uploads.
More helpNCSC: mitigating malware and ransomware attacks (opens in a new tab)
MyCyberWay training
Blue Team Specialist
Breaches like this get investigated, not just reported.
Blue Team Specialist takes the Analyst curriculum and adds the investigator's work: one incident owned end to end, hypothesis-led threat hunting with MITRE ATT&CK and KQL, breach analysis, and a root cause report people can act on.
- Scope, attacker path and dwell time
- Threat hunting with ATT&CK and KQL
- Root cause analysis and reporting
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
