Monday, February 24, 2025
Homecyber securityHellokity Ransomware Actors Returns Under New Name

Hellokity Ransomware Actors Returns Under New Name

Published on

SIEM as a Service

Follow Us on Google News

The notorious cybercrime group previously known as Hellokity has reemerged under a new alias, “HelloGookie.”

This development was reported by the cybersecurity watchdog MonThreat via their Twitter account.

Hellokity, known for its high-profile cyber-attacks, has been a significant player in digital extortion.

The group gained notoriety for deploying ransomware to infiltrate corporate networks, encrypting data, and demanding hefty ransoms for decryption keys.

Their operations have caused disruptions across various sectors, impacting business operations and consumer data privacy.

Free Webinar | Mastering WAAP/WAF ROI Analysis | Book Your Spot

The Rebranding to HelloGookie

According to the details shared by MonThreat, Hellokity has not only changed its name but also appears to have upgraded its ransomware tools and tactics.

This rebranding could be an attempt to evade law enforcement and cybersecurity defenses that had adapted to their previous methodologies.

The return of Hellokity under the new moniker “HelloGookie” poses fresh challenges for cybersecurity professionals.

Organizations must stay vigilant and update their security protocols to counter the evolved strategies of this group.

The rebranding might also indicate a possible expansion in the group’s target industries or geographical focus.

Preventative Measures

Organizations are advised to enhance their cybersecurity by implementing robust data backup solutions, conducting regular security audits, and training employees on cybersecurity best practices.

It is also essential to keep all software up to date to mitigate vulnerabilities that ransomware could exploit.

The resurgence of Hellokity as HelloGookie is a stark reminder of the persistent threat cybercriminals pose in the digital age.

Businesses and individuals must remain proactive in their cybersecurity efforts to protect against such evolving threats.

Further updates from cybersecurity experts and law enforcement agencies are eagerly anticipated as the situation develops.

Looking to Safeguard Your Company from Advanced Cyber Threats? Deploy TrustNet to Your Radar ASAP

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

Stablecoin Bank Hit by Cyberattack, Loses $49.5M to Hackers

The cryptocurrency sector faced one of its most significant security breaches this year as...

GhostSocks Malware Uses SOCKS5 Proxy to Evade Detection Systems

GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, has emerged as a significant threat within...

LockBit Ransomware Strikes: Exploiting a Confluence Vulnerability

In a swift and highly coordinated attack, LockBit ransomware operators exploited a critical remote...

Fake ChatGPT Premium Phishing Scam Spreads to Steal User Credentials

A sophisticated phishing campaign impersonating OpenAI’s ChatGPT Premium subscription service has surged globally, targeting...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Stablecoin Bank Hit by Cyberattack, Loses $49.5M to Hackers

The cryptocurrency sector faced one of its most significant security breaches this year as...

GhostSocks Malware Uses SOCKS5 Proxy to Evade Detection Systems

GhostSocks, a Golang-based SOCKS5 backconnect proxy malware, has emerged as a significant threat within...

LockBit Ransomware Strikes: Exploiting a Confluence Vulnerability

In a swift and highly coordinated attack, LockBit ransomware operators exploited a critical remote...