Ransom Cartel

Mentions · 7d1
Mentions · 30d1
All mentions2
First seenSep 11, 2026
Last mentioned20h ago

Timeline

2 articles · newest first

Kaspersky: Qilin led Q3 2026 ransomware leak-site victims

Opted-in detections blocked over 311 million online attacks, while 81,556 users encountered ransomware and 4,470 new variants appeared.

Kaspersky SecurelistNov 10, 08:00 UTC · 20h agoRansomwareExploitedCVE-2026-0257 CVE-2026-15409 CVE-2026-15410+51

Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison

A US court sentenced Ukrainian Oleksii Lytvynenko to four years in prison for developing malware loaders and handling stolen data for the Conti ransomware operation.

SecurityWeekSep 11, 11:29 UTC · Sep 11, 2026Policy & legal2 · 1 read

Related CVEs

by mentions

CVE-2026-154097%10.0
Unauthenticated SSRF in SonicWall SMA1000 Appliances
published Jul 14, 2026SonicWall SMA1000 Appliances (SMA 6210 firmware)KEVRansomwarePoC
CVE-2026-6307795%9.8
Unauthenticated Deserialization RCE in JetBrains TeamCity On-Premises
published Jul 27, 2026JetBrains TeamCity On-PremisesKEVRansomwarePoC
CVE-2026-5931062%9.8
Unauthenticated Path Traversal RCE in Broadcom VMware vCenter Server Syslog
published Jul 30, 2026Broadcom (VMware) vCenter ServerKEVRansomwarePoC ×2
CVE-2025-1473329%9.3
Unauthenticated Out-of-Bounds Write RCE in WatchGuard Fireware OS
published Dec 19, 2025WatchGuard Firebox (Fireware OS)KEVRansomware
CVE-2026-4565980%8.8
Authenticated Deserialization RCE in Microsoft SharePoint Server (Actively Exploited)
published May 22, 2026Microsoft SharePoint ServerKEVRansomware
CVE-2025-607105%7.8
Link Following Privilege Escalation in Microsoft Windows Host Process for Tasks
published Nov 11, 2025microsoft Windows 11 24H2KEVRansomware
CVE-2026-025796%7.8
Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
published May 13, 2026Palo Alto Networks PAN-OS (GlobalProtect portal and gateway)KEVRansomware
CVE-2026-1541012%7.2
Authenticated OS Command Injection in SonicWall SMA 1000 Appliance Management Console
published Jul 14, 2026SonicWall SMA1000 Appliance Management Console (AMC) — SMA 6210KEVRansomware

Appears with

Contithreat actor · 2
Deadlockmalware · 1
Windowsproduct · 1
SMA1000product · 1
vCenterproduct · 1
JetBrainsvendor · 1
Karakurtthreat actor · 1
WannaCrymalware · 1
Kasperskyorganization · 1
The Gentlementhreat actor · 1
INC Ransomthreat actor · 1
SharePoint Serverproduct · 1
VMwarevendor · 1
SonicWallvendor · 1
CISAorganization · 1
WatchGuardvendor · 1

Entities are extracted by the model from each article. First seen Sep 11, 2026, last mentioned 20h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.