Hive ransomware on Exchange servers

Users are reporting that randomly their screen will just go black for a second and come back. When this happens, it usually distorts any video currently on the screen; sometimes, they can resume working on the PC normally. However, when they view the event logs, they see the error message Display driver nvlddmkm stopped responding and has successfully recovered. In this article, we will address solutions to this issue and how to not have it again.

1. Remove Aura iCUE plugin (applies to only ASUS motherboards)

   Some PC users discovered that iCue adds an Aura plugin for ASUS MOBOs. That, combined with EVGA Precision X1, was causing the error it seems – this was determined when the screen would turn off and on when opening EVGA x1 software. In this case, the issue was resolved by removing the Aura iCUE plugins.

2. Change Power Management mode

   Right-click the battery icon on the notification area on the right of the Taskbar. Select Power Options. In the Power Options window, locate your current Power Plan. Select High performance, if that’s not your current power plan. Now, click on Change plan settings next to it. Now click on Change advanced power settings. Expand PCI Express section. Expand Link State Power Management. Now set power saving to Off for both On battery and Plugged in state. This would fix any issues caused by the low power of the video card. Click Apply > OK to save changes.

3. Update graphics driver

   Go into device manager Expand display adapter section Right-click on adapter Click on update driver Reboot

4. Rollback graphics driver

   Go into device manager Expand display adapter section Right-click on adapter Click on Roll back driver Reboot

5. Uninstall and reinstall graphics card driver

   Go into device manager Expand display adapter section Right-click on adapter Click on Uninstall device Reboot

6. Replace the graphics card

   If everything else failed, replace the graphic card

Microsoft store is ready and prepared for Windows 11 official release on October 5^th and it is coming with some surprises. It has officially confirmed that many open source and free applications will be in it like Opera, VLC, discord, Libre office, etc. It seems that Microsoft wants to place its store as one place to go for all of your software needs. Another great surprise is the coming of Epic games store implementation. It was officially confirmed but not explained in detail, will we have Epic store opened in Windows store or we will only get installer as a package we will see but this is some great news. As for how it states now, it seems that the Windows store aims to eliminate searching the web for applications and bring them all into one environment with reviews and ratings so you know which one to install and use. It also features a great search engine to find proper applications for your needs. The new store will come to Windows 10 as well but after all Windows 11 has been mostly released and adopted. So expect it via update in two or three months' time. It would be great if some larger companies decide to join MS stores like Autodesk, Adobe, the Foundry, etc so you can install everything you need from it but one can only hope.

22H2 update for Windows 11 will arrive later this year and although Microsoft is not releasing anything big there will be some interesting improvements and fixes. We take a look at some that caught our attention.

Phishing protection

One of the most interesting upcoming features is enhanced phishing protection. Microsoft Defender SmartScreen will be upgraded to alert users when they try to store passwords in plain text files and also if they accidentally type in a Microsoft account password on phishing sites.

"These enhancements will make Windows the world's first operating system with phishing safeguards built directly into the platform and shipped out of the box to help users stay productive and secure without having to learn to be their own IT department,"

Microsoft

File Explorer gets tabs, a modern sidebar, and contextual suggestions

Finally, Windows File explorer is getting tabs that will allow much easier management of folders and files inside it.

It is confirmed that Microsoft is also working on a new 'HOME' sidebar that should be modern in design and in features including OneDrive so you can find everything in one place.

Pinning of favorite files was also mentioned so you can easily pin favorites for quick access.

Full-screen widgets

Windows 11 has brought back widgets in a new way and from all the feedback users are loving them. Currently, you have a widget sidebar on the left part of the screen where you have your chosen store widgets but from the Microsoft teaser, we will have soon the option to have them in full screen.

If you are using a widget for reading news, blogs, etc. this feature will be very good since you will be able to use your whole screen for information and not just a part of it.

Suggested actions

Another new feature is 'suggested actions' which is going to be particularly useful in apps like Microsoft Teams. With this new feature, you can highlight a date in a Teams message and Windows will suggest actions.

For example, if you highlight a date, you'll see a recommendation to create an event in Microsoft Calendar for that day.

If you have encountered the NO_USER_MODE_CONTEXT Blue Screen error when using your computer, read on as this post will walk you through a couple of suggestions you can try to resolve this Stop error. This kind of Blue Screen error can occur when a program is trying to leverage the use of a system driver but fails to do so. Some of the common causes of this BSOD error are incompatible or corrupted drivers, incorrect configuration of entries in the Registry, damaged memory locations, malware infection, and many more. In addition, this Stop error does not often occur and indicates that an attempt to enter user mode with no context was made. If this is the first time you’ve restarted your computer after you’ve installed additional hardware, you have to remove the hardware and then restart your computer once again and then check the Microsoft Hardware Compatibility List to confirm that the hardware and its drivers are compatible with your operating system. If it doesn’t help, you can check out the given suggestions below to fix the NO_USER_MODE_CONTEXT Blue Screen error in Windows 10.

Option 1 – Try to update or rollback your device drivers

The first thing you can try to fix the NO_USER_MODE_CONTEXT Blue Screen error is to either update or roll back the device drivers. It is most likely that after you updated your Windows computer that your driver also needs a refresh. On the other hand, if you have just updated your device drivers then you need to roll back the drivers to their previous versions. Whichever applies to you, refer to the steps below.

• Open the Devices Manager from the Win X Menu.
• Then locate the device drivers and right-click on them to open the Properties. Note that the main drivers that might be the cause behind the NO_USER_MODE_CONTEXT Blue Screen error will be listed under the “ID ATA/ATAPI controllers” section as well as the “Storage controllers” section.
• After that, switch to the Driver tab and click on the Uninstall Device button.
• Follow the screen option to completely uninstall it.
• Finally, restart your computer. It will just reinstall the device drivers automatically.

Note: You can also directly download the relevant drivers of your computer from the manufacturers’ website. So if you have an SSD, the issue might be due to an old storage driver.

Option 2 – Try running System File Checker or SFC scan

System File Checker or SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files to good system files. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

 Reboot your PC.

Option 3 – Try running the Memory Diagnostic Tool

The Memory Diagnostic tool in windows can help resolve the NO_USER_MODE_CONTEXT Blue Screen error by checking and automatically fixing any memory-based issues. To run it, refer to these steps:

• Tap the Win + R keys to open Run and type exe and hit Enter to open the Windows Memory Diagnostic Tool.
• After that, it will give two options such as:
  • Restart now and check for problems (Recommended)
  • Check for problems the next time I start my computer
• Once your computer has restarted, perform a basic scan or you could also go for the “Advanced” options such as “Test mix” or “Pass count”. Simply tap the F10 key to start the test.

Note: After you select your preferred option, your computer will restart and check for memory-based issues. If it finds any issues, it will automatically fix them.

Option 4 – Perform System Restore

• First, tap the Win + R keys to open the Run dialog box.
• After that, type in “sysdm.cpl” in the field and tap Enter.
• Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
• After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.

Option 5 – Run the Blue Screen Troubleshooter

Troubleshooting Blue Screen of Death errors wouldn’t be complete without the Blue Screen troubleshooter. As you know, it is a built-in tool in Windows 10 that helps users in fixing BSOD errors like NO_USER_MODE_CONTEXT. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:

• Tap the Win + I keys to open the Settings panel.
• Then go to Update & Security > Troubleshoot.
• From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Besides Star Trek, Star Wars was one of my favorite movie franchises, as a kid, it was the first movie I have seen in Theatre and over the years I have rewatched and reached each entry in the franchise. It has significantly grown over the years, sometimes for worse, sometimes for better but what it always did is explored and expanded lore, characters and brought stories interesting and original enough. The Series has always been original and innovative enough with interesting characters and locations and it managed to capture the imagination of many viewers around the globe. If you or someone else is watching the franchise for the first time it is recommended actually to watch everything how it was released because of some information that is spoiled in prequels that could spoil some interesting revelations later. But if you have already watched everything and would like to follow the story from the beginning to end we are presenting you with the list of all TV series and movies in tar Wars canon in their chronological order so you can enjoy some good character developments and see the whole story unfold how it was meant to be. In the following list, as told, we are including TV series (both released and currently in production) in the Star Wars canon.

Chronological order of Star Wars franchise:

Star Wars: The Acolyte Acolyte is upcoming TV series exploring times in the old republic and the rise of the dark side within Star Wars Episode I: The Phantom Menace The first movie entry in the franchise introducing some key characters who will go through various adventures yet to come Star Wars Episode II: Attack of the Clones Continuation of story and deepening of the plot laid out in the previous movie Star Wars: The Clone Wars Animated TV series exploring war in more detail, set in the period between episodes 2 and 3, before series there is clone wars full length animated movie titles simply as Star wars clone wars serving as a pilot to series. Star Wars Episode III: Revenge of the Sith Last movie in so-called prequel trilogy finishing some stories and finalizing some character arcs Star Wars: The Bad Batch Upcoming animated series Bad batch will focus on few troopers find their way in changing the galaxy Solo: A Star Wars Story Story of everyone loved Han Solo character, this origin story will introduce you to some key characters in the later entry of series Obi-Wan Kenobi Upcoming series that will focus on everyone's favorite JEDI master Obi-Wan Star Wars Rebels Animated series exploring first sparks of forming rebel alliance against dreaded empire Andor Upcoming series set five years before the events of Rogue One, the series follows rebel spy Cassian Andor during the formative years of the Rebellion. Star Wars Rogue One Full feature movie setting up events for episode 4 Star Wars Episode IV: A New Hope First Star Wars movie, little outdated today with special effects but with a strong story and introducing some new characters which will become main icons of franchise Star Wars Episode V: The Empire Strikes Back Arguably the best movie in the whole series, leaning more to serious note and darker than previous entries. Besides Episode 3 this is the most serious and dark movie of the series. Star Wars Episode VI: Return of the Jedi Last movie entry in the so-called original trilogy, finishing some stories and wrapping up one era. Star Wars The Mandalorian Set after episode 6 show focuses on a Mandalorian bounty hunter character following his adventures in the galaxy. The Book of Boba Fett Upcoming Mandalorian spin-off TV series focusing on Bobba Fet, one of most loved bounty hunter characters in the Star Wars universe Ahsoka Star Wars: Ahsoka is an upcoming live-action television limited series exploring the character of Ashoka Tano first seen in Clone Wars Rangers of the New Republic Set within the timeline of The Mandalorian, Rangers of the New Republic is a new upcoming live-action series. Star Wars: Resistance Animated series exploring resistance against first-order setting up events to be followed in the newest trilogy of movies. Star Wars Episode VII: The Force Awakens First full feature movie set in the post-empire era introducing new characters and bringing back some fan favorites. Star Wars Episode VIII: The Last Jedi The second movie in the last order trilogy, continuing stories of previously establishes characters Star Wars Episode IX: The Rise of Skywalker Last entry in new order trilogy of movies, finishing some open stories and concluding arcs for characters previously introduced in Force Awakens. That's it, chronological order of canon TV shows and movies of the Star Wars franchise. We are sure there will be more movies and shows in the future and someday we will revisit this list to include them as well. Until then, may the force be with you. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.

Call of Duty is a fun and good game, a great time killer with a squad of friends, however sometimes the game crashes, and fun is interrupted. In this guide, we will address and solve this unpleasant issue.

1. Scan game files

   inside launcher choose options and under them, choose scan and repair game files This process can take 5-30 minutes, as the game is 60GB large. This will look through all your game files and make sure they’re all valid and that none are corrupted, which may cause crashes. When it’s complete, you’ll get a notification that the game is now playable. Try again and see if your crashes continue.

2. Update drivers

   Keeping drivers updated is crucial for the game to run smoothly, GPU drivers are possibly important. Go to your GPU manufacturer's website and get the latest drivers.

3. Lower graphic settings

   Intensive graphic requirements can overload GPU and cause crashes, try lowering details in-game and see if this will fix the issue.

4. Disable overlays

   If you’re using a program like Discordthat has an overlay, you’ll want to disable it as it may be causing the graphic error

Mozilla Firefox has introduced a new feature known as Restart with Windows which allows the browser to automatically start when your Windows 10 computer boots. This means that if you leave the Firefox browser opened while shutting down your computer, Firefox will re-open automatically along with the tabs that were opened right before you shut down your computer. Although some users may find this feature convenient, there are others who do not approve at all as it could be a nuisance. So if you’re one of the latter, then read on as this post will show you how you can disable the Restart with Windows feature in the Firefox browser on your Windows 10 computer. Refer to the instructions laid out below to get started.

• Step 1: Open Mozilla Firefox and if it’s opened already, just open a new tab and then type the following text in the address bar:

about:config

• Step 2: After typing the text given above, hit Enter and if a prompt with a warning message pops up, simply click on the “I accept the risk!” button to proceed.
• Step 3: Next, type “Restart” in the search filter which should display the following preference in the window:

“toolkit.winRegisterApplicationRestart”

• Step 4: After that, check for the preference value and then see if it’s set to true or not. If it is set to true, then it means that the Restart with Windows feature is enabled so obviously, to disable it, you need to set its value to false.
• Step 5: Now restart your computer without closing Firefox. After restarting your computer, you should no longer see Firefox starting automatically.

The Restart with Windows feature by default is disabled for most users. On the other hand, Mozilla will have this feature enabled as the default configuration in the coming weeks so it’s best that you now know what to do when that time comes since the newer versions of Mozilla Firefox are already being shipped with the Restart with Windows feature. However, if this post did not help you, then you might want to check if the feature has been added to the Startup folder, and from there, you can disable this startup program using the Task Manager > Startup tab.

I must admit that I am a big Western Digital fan, I have been using their hard drives really long time and I must admit that I am very happy with their products. Sometimes they could be a little more expensive than other drives on market but security and performance are on their side. If you ever wanted to purchase Western Digital or WD hard drives or you are considering getting one, no doubt that you have come across their color cryptic line of products. 1TB Hard drive can come in 6 different colors in your search products query and if you are not familiar with the WD color coding of hard drives you might be a little lost as to which one is right for you and what are the differences. This article is made to explain exactly that, what are WD colors representing so you can choose the right one for your needs. Western Digital has decided to use color codes in order to mark their series of disks which means that each color represents different hard drive series and it is made and aimed for different use, we are going to explore in detail each series below:

WD BLUE

Blue series is all around typical hard drive made and meant for daily use in desktop computers for all kinds of tasks. You can use it in casual gaming or for storage, its purpose is tailored for all-around casual daily users.

WD RED

WD Red HDD is designed for NAS and RAID systems. Its purpose is to be turned 24/7 who ever need access to it. Get this series if you need to have constant access to files or if you need a reliable RAID hard drive.

WD GREEN

Green series of the hard drive is manufactured for low power consumption and for storage, they are meant to be used for storage and not accessed regularly.

WD PURPLE

Purple line of hard drive products is designed solely for video surveillance systems. Instead of having a preference on reading data like WD RED, the PURPLE series is given preference on writing, constant writing to be more precise.

WD BLACK

The black series is made for an external storage medium with high performance. Due to the high performance, WD Black hard drives are much popular among photo editors and high-end gamers.

WD GOLD

WD Gold HDD provides a long-term cold storage medium. Therefore, this series of Western Digital hard drives are suitable for data centers. These hard drives can handle many sophisticated systems simultaneously and work well with different servers That's it, I hope that you have now a more clear understanding of the WD color-coding of its hard drive series. As always thank you for reading and I hope you will have a great day. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.

ConvertDocsOnline is a Browser Extension for Google Chrome developed by Mindspark Inc. This extension offers users a quick and easy way to convert documents without any additional applications installed on their computer, it also has quick access links to popular websites that the average user might find interesting. While all this may look appealing and nice, this extension injects itself into your browser.

While installed, ConvertDocsOnline will monitor your browsing activity and record visited websites, clicked links, downloads, and even viewed products. All this information is later used/sold to Mindsparks Ad network to better serve user-targeted ads.

Browsing the internet with this extension installed will result in ad placement throughout your browsing sessions. These ads might appear as normal links (sponsored content), ad links, or even pop-up ads.

ConvertDocsOnline has been marked as a Browser Hijacker by several Anti-Virus scanners and is therefore recommended for optional removal from your PC.

About Browser Hijackers

Browser hijackers (sometimes referred to as hijackware) are a type of malware that changes web browser settings without the user’s knowledge or permission. These types of hijacks are increasing at an alarming rate around the globe, and they can be truly nefarious and sometimes dangerous too. There are plenty of reasons why you may have a browser hijack; however commercial, marketing, and advertising are definitely the primary reasons for their creation. In most cases, browser hijacking is used for earning advertising revenue that comes from forced ad mouse clicks and site visits. It might appear naive, but the majority of these sites are not legitimate and may pose a significant threat to your online safety. In a much worst case, your internet browser could be hijacked to download malicious software that can do a lot of damage to your PC.

Symptoms of browser hijacker malware

Symptoms that a web browser is a hi-jacked include: 1. the browser’s homepage is modified 2. your internet browser is constantly being redirected to adult websites 3. the default online search engine and/or the default browser settings are altered 4. you see many toolbars in your internet browser 5. you might find endless pop-up adverts on your computer screen 6. your web browser gets slow, buggy crashes very often 7. you can’t navigate to certain web pages, such as computer security software-related websites.

How they infect computer systems

Browser hijackers can enter a PC in some way or other, for example via downloads, file sharing, and e-mail also. Many browser hijackings come from add-on software, i.e., toolbars, browser helper objects (BHO), or plug-ins added to browsers to give them extra functionality. Browser hijackers sneak to your computer in addition to free software downloads also that you unwittingly install alongside the original. Examples of popular browser hijackers are Fireball, CoolWebSearch. GoSave, Ask Toolbar, RocketTab, and Babylon Toolbar. The existence of any browser hijacker on your computer could drastically diminish the web browsing experience, record your internet activities that lead to critical privacy issues, degrade overall computer efficiency, and result in application instability also.

Removing browser hijackers

Certain hijackers could be removed by simply uninstalling the related freeware or add-ons from the Add or Remove Programs in the Windows control panel. But, many hijacking codes are certainly not very easy to get rid of manually, since they go deeper into your operating system. Beginner PC users should not try for the manual form of removal methods, as it calls for thorough system knowledge to perform fixes on the system registry and HOSTS file. Browser hijackers can be effectively removed by installing and running anti-malware software on the affected PC. To get rid of any browser hijacker from your laptop or computer, you should download this particular certified malware removal application – SafeBytes Anti-Malware. Along with the antivirus tool, a system optimizer, like SafeBytes’s Total System Care, will help you in getting rid of all related files and modifications in the computer registry automatically.

Virus Blocking Access To Safebytes Website And Preventing Anti-Malware Downloads - What You Should Do?

All malware is bad and the level of the damage will vary greatly in accordance with the type of infection. Some malware types modify browser settings by including a proxy server or modify the PC’s DNS configuration settings. In such cases, you’ll be unable to visit some or all of the websites, and thus unable to download or install the necessary security software to remove the malware. If you are reading this now, you may have probably realized that a malware infection is the cause of your blocked net traffic. So how to proceed when you want to install antivirus software such as Safebytes? Do as instructed below to remove malware through alternate ways.

Get rid of viruses in Safe Mode

The Windows operating system includes a special mode known as “Safe Mode” where just the bare minimum required programs and services are loaded. If the malicious software is set to load immediately when PC boots, switching into this particular mode can prevent it from doing so. In order to enter into Safe Mode or Safe Mode with Networking, press the F8 key while the PC is starting up or run MSConfig and look for the “Safe Boot” options under the “Boot” tab. Once you are in safe mode, you can try to download and install your antivirus software application without the hindrance of the malware. Now, you can actually run the antivirus scan to eliminate computer viruses and malware without hindrance from another malicious application.

Switch to an alternate internet browser

Some malware only targets certain internet browsers. If this is your situation, make use of another internet browser as it can circumvent the malware. If you’re not able to download the anti-virus program using Internet Explorer, this means the virus could be targeting IE’s vulnerabilities. Here, you need to switch to a different internet browser like Firefox or Chrome to download the Safebytes Anti-malware program.

Install antivirus on a USB drive

Another option would be to make a portable anti-malware program on your USB stick. Adopt these measures to run the anti-malware on the infected PC. 1) On a clean PC, download and install Safebytes Anti-Malware. 2) Plug the pen drive into the clean PC. 3) Double click on the downloaded file to open the installation wizard. 4) When asked, choose the location of the pen drive as the place where you would like to store the software files. Follow the instructions on the computer screen to finish up the installation process. 5) Now, transfer the thumb drive to the infected PC. 6) Double-click the anti-malware program EXE file on the pen drive. 7) Run Full System Scan to detect and clean-up up all kinds of malware.

Review of SafeBytes Anti-Malware

If you are planning to purchase anti-malware for your desktop, there are plenty of brands and utilities for you to consider. Some are good ones, some are decent, while some are simply just bogus anti-malware applications that can ruin your personal computer themselves! You have to pick a tool that has got a good reputation and detects not only computer viruses but other sorts of malware also. When thinking about trustworthy programs, Safebytes Anti-Malware is certainly the strongly recommended one. Safebytes is one of the well-established PC solutions companies, which provide this all-inclusive anti-malware software. Using its cutting-edge technology, this application will assist you to get rid of multiples types of malware including computer viruses, trojans, PUPs, worms, ransomware, adware, and browser hijackers.

SafeBytes anti-malware takes computer protection to a whole new level with its advanced features. These are some of the highlighted features included in the tool.

Real-time Active Protection: SafeBytes gives real-time active monitoring and protection against all known viruses and malware. It’ll monitor your PC for suspicious activity continuously and safeguards your PC from illegal access. Robust, Anti-malware Protection: Built upon a highly acclaimed anti-virus engine, this malware removal tool has the capacity to find and get rid of several stubborn malware threats such as browser hijackers, PUPs, and ransomware that other typical antivirus applications will miss. Extremely Speed Scanning: SafeBytes Anti-Malware has got a multi-thread scan algorithm that works up to 5 times faster than any other anti-malware software. Web Protection: Through its unique safety score, SafeBytes informs you whether a site is safe or not to access it. This will make sure that you’re always certain of your safety when browsing the world wide web. Light-weight: SafeBytes is really a lightweight tool. It uses up an extremely small amount of processing power as it operates in the background so you’re free to use your Windows-based PC the way you want. 24/7 Assistance: Support service is available 24 x 7 x 365 days through chat and email to answer your concerns. SafeBytes can keep your personal computer protected from most advanced malware threats automatically, thus keeping your online experience secure and safe. Malware issues will become a thing of the past once you put this software program to use. You’ll get the best all-around protection for the money you spend on SafeBytes AntiMalware subscription, there is no doubt about it.

Technical Details and Manual Removal (Advanced Users)

To eliminate ConvertDocsOnline manually, go to the Add/Remove programs list in the Control Panel and choose the program you want to get rid of. For internet browser extensions, go to your web browser’s Addon/Extension manager and select the add-on you intend to remove or disable. You might also want to reset your home page and search engine providers, as well as delete browsing history, temporary files, and internet cookies. In order to ensure the complete removal, manually check your hard drive and Windows registry for all of the following and remove or reset the values as needed. But bear in mind, this can be a tricky task and only computer professionals could carry it out safely. Furthermore, certain malicious programs are capable to defend against its removal. It is advised that you carry out the removal process in Safe Mode.

Hive ransomware has been targeting Microsoft exchange servers lately vulnerable to ProxyShell security issues in order to deploy various backdoors. Once the backdoor has been placed various attacks can be performed including but not limited to network reconnaissance, stealing admin accounts, taking valuable data, and even installing and deploying file-encrypting algorithms.

ProxyShell wide abuse

ProxyShell is a set of three vulnerabilities in the Microsoft Exchange Server that allows remote code execution without authentication on vulnerable deployments. The flaw has been used in past by various ransomware like Conti, BlackByte, Babuk, Cuba, and LockFile.

Security vulnerabilities have been reported to be fully patched on May 2021 but how Hive was able to still be successful in exploiting PowerShell and infiltrating into the system there seems to be still some unpatched and open issues.

Hive

Hive has gone a long way since it was first observed in the wild back in June 2021, having a successful start that prompted the FBI to release a dedicated report on its tactics and indicators of compromise.

In October 2021, the Hive gang added Linux and FreeBSD variants, and in December it became one of the most active ransomware operations in attack frequency.

Last month, researchers at Sentinel Labs reported on a new payload-hiding obfuscation method employed by Hive, which indicates active development.