RANSOMWARE 153
- MantaxOtax Android Malware Combines Ransomware With Spyware
- New Android Malware Encrypts Files, Steals Data, and Harasses Victims
- Node.js Old Technique Makes a Comeback
- ATF Responds to Major Cybersecurity Incident After Ransomware Gang's Claims
- Caught in 4K The Aurora Files
- General Electric, Philips, and Shell Investigate Alleged Breaches
- C2Looper A New Backdoor Likely Tied To Ransomware With GitHub C2
- GitHub - BushidoUK/Russian-APT-Tool-Matrix A Comprehensive Resource for Threat Hunting
- Cl0p Til you Drop - 6 Years, 10 Campaigns, 8 Zero-Days
- CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
- Ransomware Moves up the Org Chart Managers Are Prime Targets
- INC Ransomware Seizes the Moment With SonicWall Exploits
- Swiss Rail Giant Stadler Rejects $12.3M Ransom Demand After Cyberattack
- INC Ransomware Affiliate Targets ESXi & NAS Devices in AD Environment
- Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)
- Anubis Ransomware Claims Coca-Cola Fairlife Attack, Threatens Data Leak
- ThreatsDay Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
- New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
- GodDamn Ransomware Latest Beast Rebrand Uses Malicious Driver to Disable Defenses
- My Threat Feed Told Me It Was 'Chalubo.' The Binary Disagreed
- Agentic Ransomware JADEPUFFER Invades Database at Machine Speed
- Browser-Only Ransomware From LLM Hallucinations to a Practical Attack Technique
- From Bing Search to Ransomware Bumblebee and AdaptixC2 Deliver Akira
- One-two Punch Delivered in Global Operation Disrupts Cybercrime Assembly Line
- Malicious Edge Extension Abuses Native Messaging as Bridge to Malware
- Be on the lookout for Mistic, a new backdoor used by ransomware broker
- INC Ransomware Targets Mainframes
- Akira, LimeWire, and the Sour Taste of Data Exfiltration
- Who Runs the Ransomware Group 'The Gentlemen'?
- BLUERABBIT A Golang-Based Backdoor with Ransomware and Destructive Capabilities
- Apple Server Schematics Stolen in May 2026 Foxconn Cyberattack
- WantToCry Ransomware Evades Detection Through SMB Abuse
- Disrupting Fox Tempest A Cybercrime Service
- Flash Alert EtherRat and TukTuk C2 End in The Gentleman Ransomware
- Paying Ransom Won't Help as VECT 2.0 Ransomware Destroys Data Irreversibly
- Watch Guard! Qilin Affiliate Exploits Network Appliances for Initial Access
- VECT Ransomware by Design, Wiper by Accident
- Cookeville Medical Center Notifies Patients After July 2025 Ransomware Attack
- Cookeville Medical Center Notifies Patients After July 2025 Ransomware Attack
- Autovista Blames Ransomware for Service Disruption
- Autovista Blames Ransomware for Service Disruption
- Ransomware-Linked ViperTunnel Malware Hits UK and US Businesses
- New Akira Lookalike Ransomware Campaign Targeting Windows Users in South America
- Researchers Observe Sub-One-Hour Ransomware Attacks
- Case Study How Predictive Shielding in Defender Stopped GPO-Based Ransomware Before It Started
- Case Study How Predictive Shielding in Defender Stopped GPO-Based Ransomware Before It Started
- The Beast Returns Analysis of a Beast Ransomware Server
- Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
- Warlock Ransomware Group Enhances Post-Exploitation Techniques
- Payload Ransomware Claims the Hack of Royal Bahrain Hospital
- AI-Generated Slopoly Malware Used in Interlock Ransomware Attack
- AI-Generated Slopoly Malware Used in Interlock Ransomware Attack
- INC Ransomware Group Holds Healthcare Hostage in Oceania
- INC Ransomware Group Holds Healthcare Hostage in Oceania
- EV Charger Company ELECQ Hit by Ransomware Attack, Customer Data Compromised
- Ransomware Attack Exposes 1.2 Million University of Hawaii Cancer Center Records
- Washington Hotel in Japan Discloses Ransomware Infection Incident
- Pulling Back the Curtain on Warlock's Next Act
- Crazy Ransomware Gang Abuses Employee Monitoring Tool in Attacks
- Conduent Case Unveiled Volvo Reports Third-Party Compromise
- Italian University La Sapienza Offline After Cyber Attack
- BridgePay Confirms Ransomware Attack Behind Outage
- I'm locked in!
- GoTo Resolve Tool’s Background Activities Compared to Ransomware Tactics
- Was Nike hacked? Attackers threaten to leak apparel giants’ data
- Osiris - New Ransomware, Experienced Attackers?
- Hackers Weaponized 2,500+ Security Tools to Terminate Endpoint Protection Before Deploying Ransomware
- Suspects Linked to Black Basta Ransomware Group Raided in Ukraine
- New PDFSider Windows malware deployed on Fortune 100 firm's network
- Ingram Micro admits summer ransomware raid exposed thousands of staff records
- Inside RedVDS - How a single virtual desktop provider fueled worldwide cybercriminal operations
- CrazyHunter ransomware escalates with advanced intrusion tactics, six Taiwan healthcare victims confirmed
- RansomHouse upgrades encryption with multi-layered data processing
- Cybersecurity Professionals Plead Guilty to Launching Ransomware Attacks
- 700,000 Records Compromised in Askul Ransomware Attack
- LockBit 5.0 Infrastructure Exposed in New Server, IP, and Domain Leak
- Barts Health NHS Confirms Cl0p Ransomware Behind Data Breach
- Everest Ransomware Claims ASUS Breach and 1TB Data Theft
- New Ransomware Variants Targeting Amazon S3 Services Leveraging Misconfigurations and Access Controls
- One World, Many Threats - How Regional Realities Shape Global Cyber Defense
- The State of Ransomware – Q3 2025
- Gootloader malware back for the attack, serves up ransomware
- Comparitech reports ransomware surges 25% in October, hitting manufacturers, healthcare, transportation
- Ransomware negotiator, pay thyself!
- Threat Actors Utilize AdaptixC2 for Malicious Payload Delivery
- Qilin ransomware escalates rapidly in 2025, targeting critical sectors with 700 attacks amid RansomHub shutdown
- LockBit 5.0 Actively Attacking Windows, Linux, and ESXi Environments
- IR Trends Q3 2025 ToolShell attacks dominate, highlighting criticality of segmentation and rapid response
- Agenda Ransomware Deploys Linux Variant on Windows Systems Through Remote Management Tools and BYOVD Techniques
- SocGholish Malware Using Compromised Sites to Deliver Ransomware
- Ransomware Payouts Surge to $3.6m Amid Evolving Tactics
- Russia-linked hackers attack Texas electric cooperatives
- Global cyber attacks decline, but ransomware jumps 46% as GenAI threats hit education, telecom, government
- Hackers now use Velociraptor DFIR tool in ransomware attacks
- Data-Leak Sites Hit an All-Time High With New Scattered Spider RaaS and LockBit 5.0
- Hackers Actively Compromising Databases Using Legitimate Commands
- UK police arrest two over London ransomware of children's data
- Ransomware Group “Trinity of Chaos” Launches Data Leak Site
- Microsoft Critical GoAnywhere bug exploited in ransomware attacks
- Medusa Ransomware Claims Comcast Data Breach, Demands .2M
- Ransomware's favorite target in 2025 and what you can do about it
- UK agency makes arrest in airport cyberattack investigation
- Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms
- Unmasking Akira The ransomware tactics you can’t afford to ignore
- How a Plaintext File On Users’ Desktops Exposed Secrets Leads to Akira Ransomware Attacks
- New Yurei Ransomware With PowerShell Commands Encrypts Files With ChaCha20 Algorithm
- Inside VPN.SN The Bulletproof Service Powering Russian Ransomware Gangs
- KillSec Ransomware is Attacking Healthcare Institutions in Brazil
- Unmasking The Gentlemen Ransomware Tactics, Techniques, and Procedures Revealed
- US charges admin of LockerGoga, MegaCortex, Nefilim ransomware
- Microsoft Unveils Storm-0501’s Advanced Cloud Ransomware Attack Tactics
- AI-Powered Ransomware Has Arrived With 'PromptLock'
- Nissan confirms design studio data breach claimed by Qilin ransomware
- Credential harvesting campaign targets ScreenConnect cloud administrators
- Orange Data Breach Raises SIM-Swapping Attack Fears
- Blue Locker' Analysis Ransomware Targeting Oil & Gas Sector In Pakistan
- Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics
- New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises
- Cybersecurity Firm Profero Cracks DarkBit Ransomware Encryption
- SonicWall investigates possible zero-day amid Akira ransomware surge
- Makop Ransomware Identified in Attacks in South Korea
- ShadowSyndicate Infrastructure Used by Multiple Ransomware Groups Including Cl0p, LockBit and RansomHub
- Arctic Wolf Observes July 2025 Uptick in Akira Ransomware Activity Targeting SonicWall SSL VPN
- Unmasking Interlock Group's Evolving Malware Arsenal
- The Commented Kill Chain Why Old Ransomware Playbooks Never Die
- Ransomware in Q2 2025 AI Joins the Crew, Cartels Rise, and Payment Rates Collapse
- Before ToolShell Exploring Storm-2603’s Previous Ransomware Operations
- Anubis and the Death of Data A New Era of Ransomware Operations
- Unmasking the new Chaos RaaS group attacks
- Gunra Ransomware Emerges with New DLS
- Ransomware Group Uses AI Chatbot to Intensify Pressure on Victims
- Getting to the Crux (Ransomware) of the Matter
- Old Miner, New Tricks H2miner Resurfaces with Lcrypt0rx Ransomware
- From a Teams Call to a Ransomware Threat Matanbuchus 3.0 MaaS Levels Up
- GLOBAL GROUP Emerging Ransomware-as-a-Service, Supporting AI Driven Negotiation and Mobile Control Panel for Their Affiliates
- Ransomware Delivered Through GitHub A PowerShell-Powered Attack
- Dark Web Profile Arkana Ransomware
- Pay2Key’s Resurgence Iranian Cyber Warfare Targets the West
- BERT Ransomware Group Targets Asia and Europe on Multiple Platforms
- Ingram Micro outage caused by SafePay ransomware attack
- ConnectUnwise Threat actors abuse ConnectWise as builder for signed malware
- Ransomware Gangs Collapse as Qilin Seizes Control
- Scattered Spider has moved from retail to insurance
- Anubis A Closer Look at an Emerging Ransomware with Built-in Wiper
- Ransomware scum disrupted utility services with SimpleHelp attacks
- Ransomware Scum Disrupted Utility Services with SimpleHelp Attacks
- Eggs in a Cloudy Basket Skeleton Spider’s Trusted Cloud Malware Delivery
- Mapping Hidden Alliances in Russian-Affiliated Ransomware
- Interlock ransomware what you need to know
- Possible ransomware attack disrupts Maine and New Hampshire Covenant Health locations
- Cybercriminals camouflaging threats as AI tool installers
- MATLAB dev confirms ransomware attack behind service outage
- Payload Ransomware Claims Hack of Royal Bahrain Hospital