Ransomware has had an interesting—if terrifying—journey. Between 2017 and 2018, ransomware attacks increased by 60%, with attackers increasingly targeting companies with cyber insurance. This was for two reasons. First, companies started taking out cyber insurance, and then many cyber insurance policies began paying ransoms, with insurers admitting that paying the ransom could often be cheaper […]

The Phobos ransomware exhibits similarities with variants belonging to the Dharma (CrySiS) ransomware family, as the TTPs observed in cyber intrusions where Phobos ransomware was deployed are consistent with those seen in deployments of the Dharma ransomware.