* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Friday, May 9, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    Georgia Entertainment CEO says large-scale production is slowing down – Decaturish

    Georgia Entertainment CEO Warns of Slowdown in Large-Scale Productions

    Zugalu Entertainment Welcomes Crimson Herring Studios to Its Family!

    Fall 2025 TV Schedule: Your Guide to the Complete Lineup – Wyoming News Now

    Get Ready for Fall 2025: Your Ultimate Guide to the Exciting TV Lineup!

    Blackstone River Theatre presents music from Scotland with Cantrip – The Valley Breeze

    Experience the Enchanting Sounds of Scotland: Cantrip Takes the Stage at Blackstone River Theatre!

    The viral wireless audio dongle for in-flight entertainment just got a big upgrade – and I love it – ZDNET

    Game-Changer for In-Flight Entertainment: The Upgraded Wireless Audio Dongle You’ll Love!

    Tahoe City Downtown Association opens 4th of July Entertainment Grant Program – Sierra Sun

    Celebrate Independence Day: Tahoe City Launches Exciting 4th of July Entertainment Grant Program!

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Technology Innovation to Take Center Stage at The 2025 National Restaurant Association Show – Restaurant Technology News

    Get Ready for a Tech Revolution: The 2025 National Restaurant Association Show Unveils Cutting-Edge Innovations!

    Newmont signs deal to use Chrysos Corporation technology – Capital Brief

    Newmont Partners with Chrysos Corporation to Revolutionize Mining Technology

    Air Force Invests in Whisper’s Ultraquiet Propulsion Technology – FLYING Magazine

    Air Force Invests in Whisper’s Ultraquiet Propulsion Technology – FLYING Magazine

    Trump administration set to overhaul Biden’s AI chip export regulations – TechHQ

    Trump administration set to overhaul Biden’s AI chip export regulations – TechHQ

    Technology is the key to empathy in insurance – InsuranceNewsNet

    Unlocking Empathy: How Technology is Transforming the Insurance Experience

    Technology – Inflexion

    Revolutionizing the Future: The Impact of Cutting-Edge Technology

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    Georgia Entertainment CEO says large-scale production is slowing down – Decaturish

    Georgia Entertainment CEO Warns of Slowdown in Large-Scale Productions

    Zugalu Entertainment Welcomes Crimson Herring Studios to Its Family!

    Fall 2025 TV Schedule: Your Guide to the Complete Lineup – Wyoming News Now

    Get Ready for Fall 2025: Your Ultimate Guide to the Exciting TV Lineup!

    Blackstone River Theatre presents music from Scotland with Cantrip – The Valley Breeze

    Experience the Enchanting Sounds of Scotland: Cantrip Takes the Stage at Blackstone River Theatre!

    The viral wireless audio dongle for in-flight entertainment just got a big upgrade – and I love it – ZDNET

    Game-Changer for In-Flight Entertainment: The Upgraded Wireless Audio Dongle You’ll Love!

    Tahoe City Downtown Association opens 4th of July Entertainment Grant Program – Sierra Sun

    Celebrate Independence Day: Tahoe City Launches Exciting 4th of July Entertainment Grant Program!

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Technology Innovation to Take Center Stage at The 2025 National Restaurant Association Show – Restaurant Technology News

    Get Ready for a Tech Revolution: The 2025 National Restaurant Association Show Unveils Cutting-Edge Innovations!

    Newmont signs deal to use Chrysos Corporation technology – Capital Brief

    Newmont Partners with Chrysos Corporation to Revolutionize Mining Technology

    Air Force Invests in Whisper’s Ultraquiet Propulsion Technology – FLYING Magazine

    Air Force Invests in Whisper’s Ultraquiet Propulsion Technology – FLYING Magazine

    Trump administration set to overhaul Biden’s AI chip export regulations – TechHQ

    Trump administration set to overhaul Biden’s AI chip export regulations – TechHQ

    Technology is the key to empathy in insurance – InsuranceNewsNet

    Unlocking Empathy: How Technology is Transforming the Insurance Experience

    Technology – Inflexion

    Revolutionizing the Future: The Impact of Cutting-Edge Technology

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

New Fog ransomware targets US education sector via breached VPNs

June 7, 2024
in Technology
New Fog ransomware targets US education sector via breached VPNs
Share on FacebookShare on Twitter

Fog

A new ransomware operation named ‘Fog’ launched in early May 2024, using compromised VPN credentials to breach the networks of educational organizations in the U.S.

Fog was discovered by Arctic Wolf Labs, which reported that the ransomware operation has not set up an extortion portal yet and was not observed stealing data.

However, BleepingComputer can confirm the ransomware gang steals data for double-extortion attacks, using the data as leverage to scare victims into paying.

VPNs for initial access

Fog’s operators accessed victim environments using compromised VPN credentials from at least two different VPN gateway vendors.

“In each of the cases investigated, forensic evidence indicated that threat actors were able to access victim environments by leveraging compromised VPN credentials,” explains Artic Wolf Labs.

“Notably, the remote access occurred through two separate VPN gateway vendors. The last documented threat activity in our cases occurred on May 23, 2024.”

Once they gain access to the internal network, the attackers perform “pass-the-hash” attacks on administrator accounts, which are used to establish RDP connections to Windows servers running Hyper-V.

Alternatively, credential stuffing is used to hijack valuable accounts, followed by PsExec deployment on multiple hosts.

On Windows servers, Fog operators disable Windows Defender to prevent notifications alerting the victim before the execution of the encrypter.

When the ransomware is deployed, it performs Windows API calls to gather information about the system, such as the number of available logical processors to allocate threads for a multi-threaded encryption routine.

Before starting the encryption, the ransomware terminates a list of processes and services based on a hardcoded list in its configuration.

The ransomware encrypts VMDK files in Virtual Machine (VM) storage and deletes backups from object storage in Veeam and Windows volume shadow copies to prevent easy restoration.

Encrypted files are appended the ‘.FOG’ or ‘.FLOCKED’ extension, though this can be set from the JSON-based configuration block to anything the operator wants.

Finally, a ransom note is created and dropped on impacted directories, providing instructions to the victims on paying for a decryption key that will help them get their files back.

From an attack seen by BleepingComputer, the ransom note is named readme.txt and contains a link to a Tor dark website used for negotiation. This site is a basic chat interface allowing the ransomware victim to negotiate a ransom demand with the threat actors and get a list of stolen files.

Fog ransom noteFog ransom note
Source: BleepingComputer

BleepingComputer can also confirm that the Tor negotiation site is the same for both the .FOG and .FLOCKED extensions, with ongoing attacks using either extension.

In an attack seen by BleepingComputer, the ransomware gang demanded hundreds of thousands to receive a decryptor and delete the stolen data. However, it is likely more for larger companies.

Arctic Wolf Labs says it is currently unclear if Fog operates as an open ransomware-as-a-service (RaaS) that accepts affiliates or if a small private circle of cybercriminals is behind it.

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : BleepingComputer – https://www.bleepingcomputer.com/news/security/new-fog-ransomware-targets-us-education-sector-via-breached-vpns/

Tags: Ransomwaretargetstechnology
Previous Post

New Gitloker attacks wipe GitHub repos in extortion scheme

Next Post

Ukraine says hackers abuse SyncThing data sync tool to steal data

Cash Flows: Industry, Ecology, and the Future of the Great Lakes Blue Economy – Michigan Public

Cash Flows: Industry, Ecology, and the Future of the Great Lakes Blue Economy – Michigan Public

May 9, 2025
Under Trump, job prospects look ‘bleak’ for Mass. grads in environmental science – WBUR

Massachusetts Environmental Science Graduates Face Gloomy Job Prospects Under Trump Administration

May 9, 2025
A Leaked Memo Reveals Details About Trump’s War on Science at the NIH – Mother Jones

Inside the Leaked Memo: Uncovering Trump’s Battle Against Science at the NIH

May 9, 2025
Hyatt Lifestyle Group opens inaugural property in Florida – Hotel Dive

Hyatt Lifestyle Group Unveils Its First Florida Gem!

May 9, 2025
2025 IIHF World Championships Begin for Danault, Chromiak, Slukynsky – LA Kings Insider

Exciting Kickoff: Danault, Chromiak, and Slukynsky Take Center Stage at the 2025 IIHF World Championships!

May 9, 2025
US Farm Economy Is Starting to See First Hits From Trump Tariffs – Bloomberg.com

US Farm Economy Faces Initial Impact from Trump Tariffs

May 9, 2025
Georgia Entertainment CEO says large-scale production is slowing down – Decaturish

Georgia Entertainment CEO Warns of Slowdown in Large-Scale Productions

May 9, 2025
Georgia first responders unite for mental health conference to combat trauma – FOX 5 Atlanta

Georgia First Responders Join Forces for Groundbreaking Mental Health Conference to Tackle Trauma

May 9, 2025
Upcoming changes at CIA shine a spotlight on the spy agency’s director John Ratcliffe – CNN

Transformative Shifts at the CIA: Spotlight on Director John Ratcliffe

May 9, 2025
Technology Innovation to Take Center Stage at The 2025 National Restaurant Association Show – Restaurant Technology News

Get Ready for a Tech Revolution: The 2025 National Restaurant Association Show Unveils Cutting-Edge Innovations!

May 9, 2025

Categories

Archives

May 2025
MTWTFSS
 1234
567891011
12131415161718
19202122232425
262728293031 
« Apr    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (595)
  • Economy (606)
  • Entertainment (21,519)
  • General (15,210)
  • Health (9,648)
  • Lifestyle (611)
  • News (22,149)
  • People (609)
  • Politics (613)
  • Science (15,828)
  • Sports (21,116)
  • Technology (15,596)
  • World (596)

Recent News

Cash Flows: Industry, Ecology, and the Future of the Great Lakes Blue Economy – Michigan Public

Cash Flows: Industry, Ecology, and the Future of the Great Lakes Blue Economy – Michigan Public

May 9, 2025
Under Trump, job prospects look ‘bleak’ for Mass. grads in environmental science – WBUR

Massachusetts Environmental Science Graduates Face Gloomy Job Prospects Under Trump Administration

May 9, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version