Conti Ransomware is the successor of the notorious Ryuk Ransomware. It is contains unique features that separate it in terms of performance and focus on network-based targets.
SystemBC is a malware sold that is on sale in underground marketplaces. SystemBC has evolved into a Tor proxy and remote control tool favored by actors behind the latest high-profile ransomware campaigns.
Fireeye and other users of SolarWinds Orion IT monitoring and management software had been compromised by SolarWinds Supply Chain Attack. Threat actor behind this attack is identified as UNC2452 or Dark Halo.
GravityRAT aim to go cross platform. It is available for Windows OS, macOS, and Android. The reported distribution methods are malicious applications, infected email attachments, malicious online activities, social engineering, and software cracks.
GravityRAT makes a come back with versions for Android and MAC. It was previously know as for spying on Windows users only. It is capable of retrieving device data, contact lists, email addresses, call logs and SMS messages and can ex-filtrate various types of documents and files.