Source: Daniel Rubino / Windows Central
There are few constants in the world. Criminals utilizing ransomware to attack Microsoft products is one of them.
Though not as dramatic as the national-security-tier Exchange situation that dominated headlines in 2021, wherein state-sponsored hackers pilfered data that experts believe may be fuel for a secretive Chinese government AI project, the 2022 landscape isn’t devoid of drama either.
As researched and reported by the Varonis Forensics Team, a threat named Hive is stirring the Exchange pot with ransomware attacks (via ZDNet). Since Varonis first spotted Hive in June 2021, it has seen cybercriminals use the aforementioned ransomware against nonprofits, energy providers, healthcare institutions, and more all across the world.
When it comes to the stakes of being attacked by Hive, it’s what you might expect from ransomware: It’ll infect your device, get ahold of your files, then demand you either pay up or risk seeing your sensitive data get published.
What makes Hive so insidious is that, as part of its assault on a device, it uses an attack called “Pass-The-Hash,” which gives it access to domain admin accounts without the need for password cracking, resulting in an authenticated session within the network — the foundation for cybercrime field days. It achieves all of this through the delivery of a payload labeled “Windows.exe.” If you guessed that the .exe isn’t, in fact, in any way related to a legitimate instance of Windows, such as Windows 11, you’d be correct. It’s nothing but bad news from Hive that will leave files encrypted and cut off from their rightful owners.
Hive attacks are an active threat to unpatched Exchange servers, which Varonis notes when referencing recorded instances of compromise. Servers that don’t have the April and May 2021 security updates are susceptible, so anyone who’s yet to patch up should get on that.
Let’s take a look at Surface Duo 2 at six months since it launched (video)
On October 21, 2021, Microsoft began shipping Surface Duo 2 to eager customers around the world. It’s been exactly six months since then, which means it’s time to check in on the device to see how things are holding up. Are there any widespread hardware faults such as cracking USB-C ports? Has the software improved at all? Let’s talk about it!
Pair your Alder Lake CPU with the best LGA 1700 motherboard
Hundreds of motherboards are compatible with Intel’s Alder Lake 1700 socket processors, but only a few can be considered the best. We’ve rounded up our favorite Z690 chipset boards within a range of budgets so you can build your next killer gaming PC.