The Week in Ransomware - January 26th 2024 - Govts strike back

This weekly roundup details numerous active ransomware and malware incidents, including sanctions against a suspected REvil member and the imprisonment of a TrickBot developer, major victim impacts (Veolia municipal water disruption, Tietoevry data center outages, EquiLend service disruption) and a large data exposure at loanDepot (~16.6M records). The report also highlights emerging ransomware families and variants (Phobos/FAUST, Kasseika, LockXX, STOP variants, Albabat), observed TTPs such as BYOVD to disable antivirus, and leak-site activity linking groups like Conti, Royal, and BianLian.