- Gone Phishing
- Posts
- BlackCat ransomware fakes govt shutdown
BlackCat ransomware fakes govt shutdown

Welcome to Gone Phishing, your daily cybersecurity newsletter thatβs waiting to the hear the budget on taking the cybercriminals to task #Budget2024 π
Todayβs hottest cybersecurity news stories:
π BlackCat ransomware fakes govt shutdown and pulls a Bernie Madeff
π» Zoom, Skype, and Google Meets users beware! Malware manifests πΎ
π Python-based Snake info stealer spreads via Facebook Messenger π¨οΈ
Crims be like: Ransomwhere the f*ck did BlackCat go?! πππ #ExitScam
π¨ BlackCat Ransomware Vanishes in Exit Scam! π¨π°π
In a hilarious case of the scammer becoming the scammy, the threat actors orchestrating the notorious BlackCat ransomware have executed a vanishing act, leaving behind a trail of confusion and suspicion. Reports suggest an exit scam, with the darknet website shuttered and a bogus law enforcement seizure banner unfurled. π¨π»π°
Exit Scam Unveiled π»π¨π
Security researcher Fabian Wosar has sounded the alarm, revealing telltale signs of an exit scam. The abrupt closure of the darknet portal, coupled with the dubious law enforcement seizure notice, points to a coordinated effort to abscond with ill-gotten gains. π¨π°π
The Alleged Betrayal π΅οΈββοΈπΌπΈ
Speculations abound regarding the motivations behind BlackCat's disappearing act. Allegations of withheld ransom proceeds and internal strife have surfaced, with an affiliate claiming foul play and financial betrayal. The saga unfolds amidst rumours of a rebranding effort, raising questions about the group's intentions and future endeavours. π€πΌπ°
Cyber Intrigue Unraveled πππ»
As BlackCat fades into obscurity, the cybersecurity landscape witnesses a flurry of activity. LockBit ransomware undergoes a transformation, while the emergence of RA World poses new threats to healthcare, finance, and insurance sectors worldwide. The ever-evolving cyber threat landscape demands vigilance and resilience from organisations and individuals alike. πππ»
Stay Alert, Stay Secure! ππ‘οΈπ‘
Amidst the chaos of cyber warfare, staying informed and proactive is paramount. Vigilance against emerging threats, robust cybersecurity measures, and adherence to best practices are essential defences in the ongoing battle against cyber adversaries. Let's remain vigilant and safeguard our digital realms from the shadows of cybercrime. πππ»

Learn AI in 5 minutes a day. We'll teach you how to save time and earn more with AI. Join 400,000+ free daily readers for trending tools, productivity boosting prompts, the latest news, and more.

Spoofta Doofta Doompa De Do, Careful when you are meeting on Zoom πΆππ©
π¨ Beware: Malware Lurks Behind Spoofed Video Conferencing Sites! π¨ππ»
Since December 2023, threat actors have been cunningly exploiting fake websites mimicking popular video conferencing platforms like Google Meet, Skype, and Zoom. πΉππ»
Trojan Tricks Unveiled π΅οΈββοΈπ»π
Zscaler ThreatLabz researchers have unearthed a devious plot, with cybercriminals distributing Remote Access Trojans (RATs) under the guise of legitimate video conferencing software. The malware targets both Android and Windows users, posing a grave risk to unsuspecting victims. π¨π‘οΈπΌ
Sneaky Spoofs and Malicious Scripts ππ»π¨
The malicious sites, cleverly crafted in Russian, employ typosquatting tactics to deceive users into downloading malware-laden payloads. Spoofed domains closely resemble their authentic counterparts, enhancing the illusion of legitimacy. Unsuspecting visitors are tricked into downloading RATs via APK files for Android and batch scripts for Windows, initiating a cascade of nefarious activities. π£ππ₯
A Coordinated Cyber Offensive πππ‘οΈ
The threat landscape further intensifies with the emergence of WogRAT, a new malware targeting both Windows and Linux systems. Exploiting platforms like aNotepad, cyber adversaries deploy covert tactics to disseminate malicious code, amplifying the scope of their digital onslaught. Meanwhile, financially motivated actors like TA4903 orchestrate high-volume phishing campaigns, aiming to pilfer corporate credentials and perpetrate business email compromise (BEC) attacks. πππΌ
Remain Vigilant, Stay Protected! π‘οΈππ
Amidst the sea of cyber threats, maintaining vigilance is paramount. By exercising caution and adopting robust cybersecurity practices, individuals and organisations can thwart malicious actors' schemes and safeguard their digital assets. Let's stay informed, stay alert, and stay protected in the ever-evolving landscape of cyber warfare. π‘οΈππ»

π£ Catch of the Day!! πππ¦
π The Motley Fool: βFool me once, shame on β shame on you. Fool me β you can't get fooled again.β Good olβ George Dubya π Let us tell whoβs not fooling around though; thatβs the CrΓΌe π at Motley Fool. Youβd be a fool (alright, enough already! π) not to check out their Share Tips from time to time so your savings can one day emerge from their cocoon as a beautiful butterfly! π Kidding aside, if you check out their website theyβve actually got a ton of great content with a wide variety of different investment ideas to suit most budgets π€ (LINK)
π΅ Wander: Find your happy place. Cue Happy Gilmore flashback ποΈβ³πποΈ Mmmm Happy Placeβ¦ π So, weβve noticed a lot of you guys are interested in travel. As are we! We stumbled upon this cool company that offers a range of breath-taking spots around the United States and, honestly, the website alone is worth a gander. When all you see about the Land of the free and the home of the brave is news of rioting, looting and school shootings, itβs easy to forget how beautiful some parts of it are. The awe-inspiring locations along with the innovative architecture of the hotels sets Wander apart from your run of the mill American getaway ποΈπ (LINK)
π Digital Ocean: If you build it they will come. Nope, weβre not talking about a baseball field for ghosts βΎπ»πΏ (Great movie, to be fair π). This is the Digital Ocean whoβve got a really cool platform for building and hosting pretty much anything you can think of. If you check out their website youβll find yourself catching the buzz even if you canβt code (guilty π). But if you can and youβre looking for somewhere to test things out or launch something new or simply enhance what youβve got, weβd recommend checking out their services foβ sho π And how can you not love their slogan: Dream it. Build it. Grow it. Right on, brother! πΏ (LINK)

Python-based Snake π€ Isnβt that just a python? π
π¨ Beware: Snake in the Facebook Garden! ππ»
Threat actors are leveraging Facebook messages to propagate a Python-based information stealer known as Snake, wreaking havoc by pilfering credentials and sensitive data. π©ππ‘οΈ
Covert Campaign Unveiled ππ΅οΈββοΈπΌ
The insidious scheme was first unveiled on social media in August 2023. Unsuspecting users are targeted with seemingly innocuous RAR or ZIP archives, which, when opened, trigger a nefarious infection sequence. π±ππ
The Snake Uncoils ππ»πΈοΈ
Snake operates in stealth mode, employing two downloaders β a batch script and a cmd script β to fetch the information stealer from an actor-controlled GitLab repository. Designed with sophistication, Snake boasts multiple variants, with one variant assembled using PyInstaller. It meticulously targets data from various web browsers, including the Vietnamese-centric Cα»c Cα»c Browser, hinting at a regional focus. π οΈπ΅οΈββοΈπ
Vietnamese Connection Unveiled ππ
The threat landscape is further compounded by the discovery of Snake's ties to Vietnam, evident in its targeting of the Vietnamese browser and Vietnamese-language references in the source code. ππ΅οΈββοΈπ
Cybersecurity Call to Arms π‘οΈπ¨πΌ
As cyber threats proliferate, the need for robust cybersecurity measures is more pressing than ever. With information stealers like Snake lurking in the shadows, vigilance and proactive defence are paramount to safeguarding digital assets and thwarting malicious actors' advances. Let's stay informed, stay vigilant, and stay protected in the face of evolving cyber threats. π‘οΈππ

ποΈ Extra, Extra! Read all about it!
Every few weeks, we carefully select three hot newsletters to show you. Reputation is everything, so any links we share come from personal recommendation or carefully researched businesses at the time of posting. Enjoy!
π‘οΈ Tl;dr sec: Join 30,000+ security professionals getting the best tools, blog posts, talks, and resources right in their inbox for free every Thursday π
π΅ Crypto Pragmatist: Crypto made simple. Actionable alpha in 5 minutes, 3x a week. Join 47,000+ investors and insiders, for π
π Bitcoin Breakdown: The best in Bitcoin, carefully curated by an alien from the future πΎ
Let us know what you think!
So long and thanks for reading all the phish!
Give us a rating? |

