grep -rl "doj" ./articles
Fourteen people charged, two arrested, more than forty Texas residences searched and about 187 laptops seized. The most useful thing in the announcement is a list of email addresses, and it tells you where this threat is actually detected: in hiring records, not in network logs.
The owner of MonsterCloud, a firm that sold ransomware recovery as an alternative to paying, has been charged with wire fraud. The indictment alleges he paid the attackers 8 million dollars for keys and billed victims 19 million. He has pleaded not guilty.
Sality trusted any peer that spoke its protocol, so investigators became its peers and substituted sinkholes for the real ones. The operator is reportedly still in Bashkortostan, no arrests are reported, and the malware sitting on every one of those machines is exactly where it was on Sunday.