Skip to content
Threat Feed
Subscribe

Tag

Black Basta Ransomware

2 briefs RSS
high advisory

Detection of Common Ransomware File Extension Modifications

This analytic identifies ransomware activity by detecting file creation or modification events on endpoint filesystems where the resulting file extensions match known ransomware patterns, potentially leading to significant data loss and operational disruption.

ransomware endpoint-detection file-modification impact Rhysida Ransomware Prestige Ransomware LockBit Ransomware Medusa Ransomware +7
1r 1t
medium advisory

ESXi Download Error Detection

Detection of failed file download attempts on ESXi hosts, potentially indicating unauthorized or malicious activity such as installing or updating components, including VIBs or scripts.

ESXi +3 vmware syslog anomaly T1601.001 T1685 ESXi Post Compromise Black Basta Ransomware Infrastructure +1
2r 2t