Diving deep into Phobos ransomware. [Research Saturday]
Guilherme Venere from Cisco Talos joins to discuss their research on "A deep dive into Phobos ransomware, recently deployed by 8Base group." Cisco Talos discovered that 8Base’s Phobos ransomware payload contains an embedded configuration, which is a significant difference between 8Base’s Phobos variant and other Phobos samples that have been observed in the wild since 2019.
In this 2-part research series, Talos conducts a deep dive into the Phobos ransomware, including its affiliate structure, activity and capabilities, as well as the one private key that could enable decryption of all the samples analyzed.
The research can be found here:
- A deep dive into Phobos ransomware, recently deployed by 8Base group
- Understanding the Phobos affiliate structure and activity
Learn more about your ad choices. Visit megaphone.fm/adchoices
Fler avsnitt av CyberWire Daily
Visa alla avsnitt av CyberWire DailyCyberWire Daily med N2K Networks finns tillgänglig på flera plattformar. Informationen på denna sida kommer från offentliga podd-flöden.