Early Monday morning, Pemex, Mexico’s state petroleum company was hit with ransomware, bringing several critical systems to a halt. While early news agencies were reporting on Ryuk, upon an investigation of the binaries by several researchers including Vitali Kremez, it was discovered that this attack was carried out using the BitPaymer lookalike, DoppelPaymer. The actors behind this attack are demanding a ransom of $5 million at the end of November.
An Updated ServHelper Tunnel Variant
Binary Defense December 20, 2019
James Quinn, Threat Researcher for Binary Defense Executive Summary Binary Defense Researchers discovered active Command
