Red Cell Blog
Cybersecurity Headlines & Trends Explained
Encrypted Client Hello
What is Encrypted Client Hello? Encrypted Client Hello (ECH) is a TLS protocol extension that encrypts the initial "Client Hello" message in the TLS handshake, concealing the domain name a user is trying to access from network observers, enhancing privacy and security. This article explains this TLS protocol extension and the impact it has on the content filtering settings on your network security devices.
M&S and Co-op Under Siege: What These Cyber Attacks Teach Us
The past few weeks have sent ripples of concern through the UK Retail landscape as giants Marks & Spencer (M&S) and the Co-operative Group (Co-op) found themselves battling significant cyber attacks. These attacks have caused significant operational disruption, with M&S suspending online orders and…
AsyncRAT Phishing Campaign Targeting Hotel Staff
At the beginning of April, WatchGuard received a report from a customer in the hospitality business describing a new phishing campaign targeting their staff. The attack starts with the threat actor opening a reservation request with the hotel, which they then cancel by email, citing a bad review for…
Code Red (2001): The Worm That Defaced Websites
While the world was captivated by the first Harry Potter movie, cybercriminals were busy launching one of the first major web server worms. What Was Happening in the World: The 9/11 attacks in the United States profoundly shifted global security policies, increasing focus on cybersecurity and…
Ransomware Tracker (Entry #242): Yashma
Entry: https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/yashma Note: This page is dedicated to the Yashma (Chaos v6.0) ransomware builder and does not reflect any encryptors created from the builder. Note: This is the second iteration of the Chaos ransomware builder series. For…
Ransomware Tracker (Entry #241): Chaos v5.0
Entry: https://www.watchguard.com/wgrd-security-hub/ransomware-tracker/chaos-v50 Note: This page is dedicated to the Chaos v5.0 ransomware builder and does not reflect any encryptors created from the builder. Note: This is the second iteration of the Chaos ransomware builder series. For preliminary…
Looking For More?
Red Cell Podcast
A weekly podcast featuring the leading white-hat hackers and security researchers.
Ransomware Tracker
The Ransomware Tracker is a dynamic, all-in-one hub for IT professionals, researchers, and cybersecurity-minded folks to learn about the entire ransomware landscape. This information-laden resource brings together WatchGuard Red Cell research with evidence from all over the Internet into one single convenient location.