<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<span style="font-size:12pt;margin:0px;color:black;background-color:rgb(255, 255, 255)"><span style="margin:0px"><span style="margin:0px;background-color:white">Hello,</span></span></span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<div style="font-size:12pt;margin:0px;color:black;background-color:rgb(255, 255, 255)">
<div style="margin:0px">
<div style="margin:0px;background-color:white">
<div style="margin:0px"><br>
</div>
<div style="margin:0px">I hope everyone is doing well!</div>
<div style="margin:0px"><br>
</div>
Below is the entry for today.</div>
<div style="margin:0px;background-color:white"><br>
</div>
<div style="margin:0px;background-color:white">08/18/2022 - Diary entry #576:</div>
<div style="margin:0px;background-color:white"><br>
</div>
<blockquote style="background-color:white;margin-top:0px;margin-bottom:0px">
<div style="margin:0px"></div>
Covered in several of our Daily Diaries, most recently in our Daily Diary #454, BlackByte is one of the many ransomware operations active nowadays. Operating under the ransomware-as-a-service model, BlackByte is notorious for targeting manufacturing, healthcare,
and other industries in the U.S. and Europe. In our Daily Diary #452, we covered BlackByte attack on San Francisco 49ers, one of their most high-profile victims.
<div style="margin:0px"><br>
</div>
<div style="margin:0px">Recently a new version of BlackByte wall-of-shame was discovered. Although still under development (since most features are still broken) the new website reveals an upgrade in BlackByte's extortion model. Now, after a victim's data is
published in their wall-of-shame, they will have three options: extend the countdown timer for 24 hours (costing $5,000 USD), destroy all the stored information (costing $300,000 USD), or download the data (costing $200,000 USD).</div>
<div style="margin:0px"><br>
</div>
<div style="margin:0px">We believe the values presented are just placeholders in their under-development platform, since ransomware operations often adjust the ransom value based on their target's revenue. Nevertheless, this change in their extortion technique
shows a more aggressive approach, trying to profit on more than one level. If their approach is successful we believe other ransomware gangs will adopt a similar approach - therefore we highly recommend never paying the ransom, especially considering there
is no guarantee that the decryptors will work, and neither that the stolen data will really be destroyed and not shared with other cybercrime gangs.<br>
<br>
</div>
<div style="margin:0px"></div>
</blockquote>
<span style="margin:0px;background-color:white"></span><span style="margin:0px;background-color:white">Kind Regards,</span></div>
</div>
<br>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</div>
<div></div>
<div></div>
<div></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<table style="font-family:"Times New Roman"; font-size:medium; text-align:start">
<tbody>
<tr>
<td width="180" align="left" style="width:180px">
<table width="120" align="left">
<tbody>
<tr>
<td colspan="3" align="center"><a href="https://www.appgate.com/"><img alt="" width="120" height="30" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/logo@2x.png"></a></td>
</tr>
<tr>
<td colspan="3" align="center"> </td>
</tr>
<tr>
<td width="37%" align="center"><a href="https://www.linkedin.com/company/appgate-security/"><img width="18" height="18" alt="" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/likedin@2x.png"></a></td>
<td width="28%"><a href="https://twitter.com/AppgateSecurity"><img width="20" height="18" alt="" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/twitter@2x.png"></a></td>
<td width="35%"><a href="https://www.youtube.com/channel/UC-8GvxcZbm-R3EJNl8jYjiQ"><img width="26" height="18" alt="" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/youtube@2x.png"></a></td>
</tr>
</tbody>
</table>
<p> </p>
</td>
<td width="350" colspan="2" rowspan="2" style="width:350px">
<p style="font-family:Arial,Helvetica,sans-serif; font-size:13px; color:rgb(12,12,12)">
<strong>Felipe Duarte Domingues</strong><br>
Manager, MART<br>
<strong>Appgate</strong></p>
<p style="font-family:Arial,Helvetica,sans-serif; font-size:13px; color:rgb(12,12,12)">
E:<span> </span><font color="#228ebe"><a href="mailto:felipe.duarte@appgate.com" title="mailto:felipe.duarte@appgate.com">felipe.duarte@appgate.com</a></font></p>
</td>
</tr>
</tbody>
</table>
<br>
</div>
</div>
</div>
</div>
</body>
</html>