Ransomware and living-off-the-land attacks continue to top the list of threats facing enterprise organizations. Attackers are increasingly eschewing malicious attachments for links in emails, which when clicked download malware. The most prolific ransomware strain that Group-IB tracked in the first half of 2019 was Troldesh, a malware tool that attackers used not just to encrypt files but also to mine phony traffic for ad-fraud campaigns. Attacks are using old, less-restrictive versions of PowerShell and bypassing policies set to restrict policies.”]

