conti-pentester-guide-leak

conti-pentester-guide-leak Este repositorio fue creado para archivar los filtrados materiales de pentesting filtrados, que anteriormente fueron entregados a los afiliados del grupo de ransomware Conti: obraz Los materiales mencionados cubren temas como: configurar el software Rclone con MEGA para...

Lifecycle-Based Design and Evaluation of Real-Time Backup Triggers for Ransomware Damage Mitigation

Ransomware continues to encrypt files during the interval between attack onset and detection. Real-time backups can mitigate this damage by preserving files before they are modified. The previously proposed Real-Time Open-File Backup System ROFBS triggers backups primarily on file-open events...

conti-ransomware-writeup

Conti Ransomware Write Up Overview This repository contains my full investigation and technical write‑up of a Conti ransomware compromise targeting a Microsoft Exchange server. The analysis was conducted using Splunk 8.2.2 , reviewing 28,145 events across Windows Security, Sysmon, and IIS log...

Malware

YARA rules, programs for ransomware families: Akira Babuk Beast BlackByte BlackCat ALPHV BlackMatter BlueLocker MemeCryptor Cerber Conti DarkBit DeadBolt Dharma Enmity GarrantyDecrypt GlobeImposter / NewBomani GoodMorning / SD HardBit Hive / Hunters International HsHarada / Rapture Hunters...

From Hacks to Bioweapons, Claude Misuse Is Now Everywhere

Plus: The US disrupts the internet’s biggest black market, a Conti ransomware hacker gets prison time, Meta fails to stop AI-generated videos of child abuse...

Conti-Ransomware-DFIR-Investigation

Conti Ransomware — DFIR Investigation ProxyShell Exploitation...

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The operators of the DevMan ransomware-as-a-service RaaS scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various aspects related to victims. Swiss cybersecurity company PRODAFT is tracking the centrally administere...

Extradited Ukrainian Man Admits Role in Conti Ransomware Attacks

Ukrainian national Oleksii Lytvynenko has pleaded guilty in the US to wire fraud conspiracy linked to Conti ransomware, which hit more than 1,000 victims and generated at least $150 million in ransom payments...

Ukrainian Conti Ransomware Suspect Extradited to US from Ireland

Ukrainian man accused of helping run Conti ransomware extradited from Ireland to the U.S. to face charges over global cyberattacks and $150M in ransom payments...

EUVD-2006-6933

Malware in sbrugna...

EUVD-2007-3477

Malware in sbrugna...

EUVD-2025-10612

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-node-red-conti (npm)

The package @zalastax/nolb-node-red-conti was found to contain malicious code...

MAL-2025-12660 Malicious code in @zalastax/nolb-node-red-conti (npm)

The package @zalastax/nolb-node-red-conti was found to contain malicious code...

Cops in Germany Claim They’ve ID’d the Mysterious Trickbot Ransomware Kingpin

The elusive boss of the Trickbot and Conti cybercriminal groups has been known only as “Stern.” Now, German law enforcement has published his alleged identity—and it’s a familiar face...

Hackers Are Calling Your Office: FBI Alerts Law Firms to Luna Moth’s Stealth Phishing Campaign

The U.S. Federal Bureau of Investigation FBI has warned of social engineering attacks mounted by a criminal extortion actor known as Luna Moth targeting law firms over the past two years. The campaign leverages "information technology IT themed social engineering calls, and callback phishing...

ROFBS$Α$: Real Time Backup System Decoupled from ML Based Ransomware Detection

This study introduces ROFBS$α$, a new defense architecture that addresses delays in detection in ransomware detectors based on machine learning. It builds on our earlier Real Time Open File Backup System, ROFBS, by adopting an asynchronous design that separates backup operations from detection...

CVE-2025-32503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Conti Link Shield link-shield allows Stored XSS.This issue affects Link Shield: from n/a through = 0.5.4...

CVE-2025-32503

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Conti Link Shield link-shield allows Stored XSS.This issue affects Link Shield: from n/a through = 0.5.4...

PT-2025-15782 · Unknown · Jose Conti Link Shield

Name of the Vulnerable Software and Affected Versions: Jose Conti Link Shield versions 0.5.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...