Chimera ransomware threatens to expose then tries to recruit
Cyber criminals are an enterprising bunch when it comes to business plans. Take Chimera, a relatively new player in the ransomware racket. In the first place the gang gets into your computer and encrypts your files, then they threaten to publish your files if you don't pay the ransom to decrypt. Sounds frightening, but in fact it is a bluff: there is nothing in their technology that actually enables them to extricate any files, and seemingly their command and control infrastructure is weak in comparison to other players. But its coup de grace: you have been hacked, you have been encrypted and now you have paid your ransom, Chimera then invites you to join them on a commission basis! "Take advantage of our affiliate program! More information in the source code of this file."

Exploits & Vulnerabilities

Two vulnerabilities in PaperCut have been found, and one of them is being actively exploited in the wild. This blog entry provides a summary of the vulnerabilities, and includes security guidance for IT and SOC professionals.