Petya Ransomware

In the last half of 2016, the rise of ransomware became a force to be reckoned with, with several new variants being discovered weekly. That trend has shown no signs […]

Continue reading

Coming To a Break Room Near You: Point-of-sale malware

by Noah Dunker At about 6:00 AM on July 4th, 2017 RiskAnalytics’ ThreatSweep platform identified a break room vending kiosk at a customer’s office that had been infected with a point-of-sale malware […]

Continue reading

WannaCry Ransomware Outbreak

by Noah Dunker A new variant of the WannaCry ransomware family, “WanaCrypt0r 2.0,” was discovered in the wild sometime around 8:00 AM GMT, Friday, May 12, 2017. This “worm” variant […]

Continue reading

Incident Response Case Study: New worms exploiting the NSA toolkit

by Noah Dunker Last week, RA Labs noticed MS17-010 exploit attempts against production networks we’re monitoring, seemingly unrelated to the massive WannaCry outbreak two weeks ago. On Monday, May 22, […]

Continue reading

RiskAnalytics Internship: The Future of Security

“We’re dealing with such exceptional individuals at a young age that all of us that had interactions with the interns have come away asking ourselves, ‘what was I doing at […]

Continue reading

Rule of three: Patching, training and least privilege (Part 3)

This is the final post in our “Rule of three” series. Today’s topic is least privilege. Least privilege is a principle of access control that says no user should be […]

Continue reading

Rule of three: Patching, training and least privilege (Part 2)

This is the second post in our “Rule of three” series. Today we’re going to talk about training. User behavior is implicated in an estimated 60 to 80 percent of […]

Continue reading

Faster than the speed of crime: the need for rapid intel sharing

As of Monday September 11, RA Labs is tracking a nascent BotNet that appears to consist mostly of exploited routers. While it bears some similarity to other popular telnet “IoT” […]

Continue reading