Threat Source newsletter (Aug. 26, 2021)
Summary: Cisco Talos reported a new campaign delivering commodity RATs, including njRAT and AsyncRAT, against travel and hospitality organizations in Latin America, operated by a threat actor based out of Brazil whose techniques resemble the Aggah group. Talos also reported that the LockBit ransomware-as-a-service operation is launching attacks with its 2.0 version against organizations in the U.K., Taiwan, Chile and Italy, adding new encryption features and an effort to recruit insiders, and that LockBit was behind an attack on global consulting firm Accenture.
Key Takeaway: LockBit 2.0 is not only encrypting data but actively recruiting insiders inside targeted organizations with promises of payouts in the millions of dollars, which turns your own staff into a potential delivery path that endpoint controls were never designed to stop.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026