Ahnlab Ransomware

AhnLab Asia Pacific Website - AhnLab. An industry-leading information security vendor, delivers a comprehensive security lineup including proven, world-class antivirus products, network security appliances, and advanced security services. AhnLab ASEC Analysis Team has been monitoring BlueCrab(=Sodinokibi) ransomware in form of Javascript distributed via phishing download page. The phishing download page is masquerading as the one to download utilities, and appears on the top of Google search results as Figure 1. RSA: AhnLab to Improve Malware Detection. A bad review can be great for a company, if they take it as constructive criticism. I panned AhnLab's V3 Click for poor detection, and they're responding.

RansomwareAnti-ransomware

Find the latest threat intelligences direct from AhnLab’s security experts

AhnLab estimates that in 2019, 369 companies and 13,497 systems (PC and server) suffered damage due to CLOP Ransomware. As only the attacks against companies were taken into account, there may be many more systems that suffered damage if taking unconfirmed systems into account.

Ahnlab Anti-ransomware Tool (beta)

  • Threat Analysis_Operation Shadow Force

    Operation Shadow Force

    This analysis report will examine Operation Shadow Force that had been hidden behind legitimate certificates for the last seven years.

    DownLoad
  • Threat Analysis

    Five Malicious Sextortion Apps

    This analysis report will examine the top five malicious applications being used for sextortion scams.

    DownLoad
Ahnlab

Ahnlab Anti-ransomware Tool

Issue Report

Ahnlab Ransomware

The Evolution of Magniber Ransomware

This analysis report will examine the recent malicious activities of Magniber ransomware from changes in exploited vulnerability to shellcode.

DownLoad

Sour Lemon Duck: PowerShell Malware Exploiting SMB Vulnerability

This analysis report presents the kill-chain, primary functions, and internal proliferation methods of Lemon Duck in full detail.

DownLoad

Operation Kabar Cobra: Tenacious cyber-espionage by Kimsuky

This report describes the latest attacks by Kimsuky Group including main methods, and changes in their purpose and targets.

DownLoad

Full Discloser of Andariel, a Subgroup of Lazarus Threat Group

This report describes the several cyberattacks by Andariel Threat Group including main methods, and changes in their purpose and targets

DownLoad

Ghosts Dwelling in the USB Memory

This analysis report will examine the the malware that has been dwelling in the USB memory during the last decade.

DownLoad

Detailed Analysis of Red Eyes Hacking Group

This report takes a closer look at the main activities of Red Eyes and another group that may be affiliated with it.

DownLoad

Analysis Report on Attacks Targeting South Korea

This report shows attacks targeting South Korea; attack method and hacking groups.

DownLoad

Targeted Attacks on Defense Industry

This report presents analysis of attacks on defense industry which can be serious concerns to national security.

DownLoad