Talos Takes 128: Year in Review - Ransomware and Commodity Loaders Edition
Summary: Cisco Talos released its 2022 Year in Review, with podcast episodes covering the broadening ransomware landscape and the commodity loaders that support it, including how Qakbot, IcedID, and Trickbot changed over the year. Talos researchers also discuss the overlap between these threats and renewed concern over LoLBins, with topic summaries released from December 14 through February.
What's compelling: Talos notes the ransomware space continually adapts to geopolitical shifts, defender actions, and law enforcement efforts that increased in scope and intensity in 2022 - meaning the loaders feeding it, like Qakbot, IcedID, and Trickbot, keep evolving alongside it.
Read the original at Cisco Talos ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026