Skip to content
Threat Feed
Subscribe

Actor

LockBit

2 briefs RSS
Also known as: BITWISE SPIDER
medium threat

Detection of EventLog Registry Security Descriptor Tampering

Attackers modify the 'ChannelAccess' registry value to restrict event log visibility and evade detection, a technique observed in ransomware campaigns like LockBit.

Windows LockBit +1
1r 1t
critical threat

Active Exploitation of Apache ActiveMQ RCE Vulnerability (CVE-2023-46604)

CVE-2023-46604 is a remote code execution vulnerability affecting Apache ActiveMQ that is actively exploited in the wild by ransomware operators, allowing remote attackers to execute arbitrary shell commands.

LockBit +2 activemq rce cve-2023-46604 ransomware
2r 2t