Skip to content
Glock Enterprises
  • Welcome
  • Blog
  • Resources
  • Support

MountLocker ransomware uses Windows API to worm through networks

23rd May 2021 peterglock

Whenever I see ‘worm’, I shiver a little…:

The MountLocker ransomware operation now uses enterprise Windows Active Directory APIs to worm through networks. […]

Original Article

Information Security permalink

Post navigation

← ‘Did weak wi-fi password lead the police to our door?’
Why the security stack needs to move to the edge →

Recent Posts

  • CISA warns orgs to switch to Exchange Online Modern Auth until October
  • California’s attempt to protect kids online could end adults’ internet anonymity – TheRegister
  • The Link Between AWM Proxy & the Glupteba Botnet
  • Securing cyber-physical infrastructure | NCC Group – JDSupra
  • ADPPA US Privacy Law: Coming Soon in Wake of Roe v. Wade Redo – Security Boulevard

Get in touch

Email: [email protected]


View Glock Enterprises Ltd profile on Ariba Discovery

Data Protection Register

Registered with the ICO: ZA494319

About

Glock Enterprises Ltd. Registered in England & Wales No. 11183883

VAT No: GB 361 2795 89

Glock Enterprises (Europe) OÜ
Registered in Estonia
No. 16149069

VAT No: EE102351110

All content (c) Glock Enterprises Ltd 2021

Pages

  • Blog
  • Privacy Policy
  • Resources
    • Free Trial – Private Threat Intelligence
    • White Paper: Building a Business Case for Cybersecurity Asset Management
    • White Paper: Cyber Deception – Migrating to an alternative platform
    • White Paper: Hunting for Threats in Operational Technology
    • White Paper: Internet Connected Storage
    • Whitepaper: 5 Steps to Building a Threat Modelling Program for AWS
    • Whitepaper: Coping with a flood of Data Subject Access Requests
  • Services
  • Support
  • Under Construction, Maintenance, or Retired…
  • Welcome

The Latest from Twitter

Brown Glock Follow

Intelligence and expertise in cyber and data risk. Also...random musings on lots of other stuff.

brownglock
brownglock Brown Glock @brownglock ·
4h

Repost: Still using Basic Auth? Not only is it a bad idea, but your going to be forced to migrate to OAuth so you might as well move now...:

[...] CISA's warning comes after Microso [...] https://glock.co.uk/?p=67659

Reply on Twitter 1542580625542156294 Retweet on Twitter 1542580625542156294 Like on Twitter 1542580625542156294 Twitter 1542580625542156294
brownglock Brown Glock @brownglock ·
14h

Still using Basic Auth? Not only is it a bad idea, but your going to be forced to migrate to OAuth so you might as well move now...:

[...] CISA's warning comes after Microso [...] https://glock.co.uk/?p=67659

Reply on Twitter 1542429385172598784 Retweet on Twitter 1542429385172598784 Like on Twitter 1542429385172598784 Twitter 1542429385172598784
brownglock Brown Glock @brownglock ·
29 Jun

I was about to comment that I’ve gone the other way and only use one screen. Then I remember my habit of printing out the doc I’m working on AND using my iPad alongside my laptop…

Azeria @Fox0x01

I swear, no matter how many monitors I get, it’s never enough.
Reply on Twitter 1542205282696183808 Retweet on Twitter 1542205282696183808 Like on Twitter 1542205282696183808 Twitter 1542205282696183808
brownglock Brown Glock @brownglock ·
29 Jun

Repost: I usually make the assumption that everything I do is tracked, usually to put my eyeballs in from of an ad. I'm cautiously in favour of legislation like this...:
[...] Supporters [...] https://glock.co.uk/?p=67613

Reply on Twitter 1542198525961854976 Retweet on Twitter 1542198525961854976 Like on Twitter 1542198525961854976 Twitter 1542198525961854976
Load More...
Proudly powered by WordPress | Theme: Moesia by aThemes