meta_pixel
Tapesearch Logo
Log in
CyberWire Daily

Piercing the through the fog. [Research Saturday]

CyberWire Daily

N2K Networks, Inc.

Daily News, Tech News, News, Technology

4.61K Ratings

🗓️ 22 June 2024

⏱️ 17 minutes

🧾️ Download transcript

Summary

Kerri Shafer-Page from Arctic Wolf joins us to discuss their work on "Lost in the Fog: A New Ransomware Threat." Starting in early May, Arctic Wolf's Incident Response team investigated Fog ransomware attacks on US education and recreation sectors, where attackers exploited compromised VPN credentials to access systems, disable Windows Defender, encrypt files, and delete backups. Despite the uniformity in ransomware payloads and ransom notes, the organizational structure of the responsible groups remains unknown. The research can be found here: Lost in the Fog: A New Ransomware Threat Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0

You're listening to the CyberWire Network, powered by N2K.

0:07.0

When it comes to ensuring your company has top-notch security practices, things can get complicated fast.

0:21.0

Vanta automates compliance for SOC2, ISO 2701, HIPAA and more, saving you time and money.

0:29.7

With Vanta you can streamline security reviews by automating questionnaires and

0:34.2

demonstrating your security posture with a customer-facing trust center.

0:38.4

Over 7,000 global companies like Atlassian, Flow Health, and Quora use Vanta to manage risk and prove security

0:46.5

in real time.

0:48.4

Our listeners can claim a special offer of $1,000 off Vanta at vanta.com slash cyber.

0:55.8

That's VANTA.com slash cyber for $1,000 off Banta. Hello, Hello everyone and welcome to the CyberWire's research Saturday.

1:17.0

I'm Dave Bitner and this is our weekly conversation with researchers and analysts tracking down the threats and vulnerabilities,

1:25.0

solving some of the hard problems and protecting ourselves in a rapidly evolving cyberspace.

1:31.0

Thanks for joining us. On and around early May, around May 2nd, Artif Wolf began monitoring deployment of the new ransomware variant referred to as as fog.

1:47.3

What we saw was that across victim organizations, most of them were in the U.S.

1:53.4

With about 80% of the victims in the education sector

1:57.4

and about 20% in the recreation sector.

2:00.6

That's Carrie Schaefer Page, vice president of digital. sector. today is titled Lost in the Fog a New Ransomware Threat.

2:14.0

So the threat actors showed an interest in rapid encryption of

2:24.8

the M storage data and then ransom payment for

2:27.6

decryption of the said data.

2:29.0

Right, so this is pretty common but what we didn't see is the actual exfiltration.

2:35.0

And something I should point out too when it comes to the education sector,

2:40.0

this is often a understaffed and underfunded sector right so they don't have a lot of

...

Please login to see the full transcript.

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.

Copyright © Tapesearch 2025.