Alphabet Inc.’s Google detected a group of ransomware hackers trying to breach companies in 2021, exploiting a vulnerability in Microsoft Corp.’s Windows. The group sent over 5,000 malicious emails a day to up to 650 global organizations, often leveraging a flaw in MSHTML. Microsoft issued a security fix for the Windows vulnerability in late 2021. Lately, the group has attacked various organizations and industries with a less specific focus. The group referred to by Google as Exotic Lily used artificial intelligence technology to create fake LinkedIn profiles. The group functions as an initial access broker, which breaks into corporate computer networks and passes that access to other cybercriminal syndicates. Exotic Lily is associated with the notorious Russian-speaking ransomware group, Conti. The operators worked a fairly typical 9-to-5 job, with very little activity during the weekends, and could be working from a Central or an Eastern Europe timezone. By Anusuya Lahiri © 2021 The …
-
Recent Posts
-
Archives
- May 2025
- April 2025
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- September 2013
- July 2013
- March 2013
- January 2013
- December 2012
- November 2012
- December 1
-
Meta