Sodinokibi ransomware uses MS API to encrypt open and locked filesSecurity Affairs·May 11, 07:58 UTC · May 11, 2020Ransomware60
Nokoyawa ransomware attacks with Windows zeroKaspersky Securelist·Apr 11, 17:36 UTC · Apr 11, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, AndroidThe Hacker News·Jul 2, 05:15 UTC · Jul 2, 2026RansomwareCVE-2023-486360
⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and MoreThe Hacker News·Jul 6, 13:02 UTC · Jul 6, 2026RansomwareCVE-2026-48276CVE-2026-48283CVE-2026-48277+69 CVEs160
A Look Into Public Clouds From the Ransomware Actor's PerspectivePalo Alto Unit 42·Jun 5, 22:33 UTC · Jun 5, 2024Ransomware60
Report: how cybercriminals abuse API keys to steal millionsSecurity Affairs·May 21, 22:14 UTC · May 21, 2021Ransomware45
Wormable bash DarkRadiation Ransomware targets Linux distrosSecurity Affairs·Jun 22, 20:59 UTC · Jun 22, 2021Ransomware60
Ransomware incidents in Japan during the first half of 2025Cisco Talos·Aug 19, 10:00 UTC · Aug 19, 2025Ransomware60
Review: Group-IB Threat Hunting FrameworkHelp Net Security·Jun 15, 08:51 UTC · Jun 15, 2021Ransomware60
RedAlert, LILITH, and 0mega, 3 new ransomware in the wildSecurity Affairs·Jul 15, 07:26 UTC · Jul 15, 2022Ransomware57
Recorded Future Announces Powerful Enhancements to its Ransomware Mitigation SolutionRecorded Future·Nov 28, 00:00 UTC · Nov 28, 2025Ransomware60
JADEPUFFER: First End-to-End AISecurity Affairs·Jul 3, 11:29 UTC · Jul 3, 2026Ransomware in the wildCVE-2025-3248CVE-2021-2944160
Novel News on Cuba Ransomware: Greetings From Tropical ScorpiusPalo Alto Unit 42·Jun 5, 20:16 UTC · Jun 5, 2024Ransomware57
The Top 10 Attack Surface Exposures in 2026The Hacker News·Jun 17, 10:30 UTC · Jun 17, 2026Ransomware60
BlueSky Ransomware: Fast Encryption via MultithreadingPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024RansomwareCVE-2020-0796CVE-2021-173260
Votiro integrates with Box to prevent new and unknown threats before they enter the networkHelp Net Security·Oct 21, 00:00 UTC · Oct 21, 2022Ransomware60
Stolen certificates in two waves of ransomware and wiper attacksKaspersky Securelist·Dec 22, 17:01 UTC · Dec 22, 2022Ransomware60
A deep dive into Phobos ransomware, recently deployed by 8Base groupCisco Talos·Nov 17, 13:01 UTC · Nov 17, 2023Ransomware57
Cyemptive Enterprise Scanner 2: Eliminating threats in files before a problem is actually initiatedHelp Net Security·Jun 4, 00:00 UTC · Jun 4, 2020Ransomware57
Medusa Ransomware Uses Malicious Driver to Disable AntiThe Hacker News·Mar 22, 04:07 UTC · Mar 22, 2025Ransomware57
Large-scale extortion campaign targets publicly accessible environment variable files (.env)Security Affairs·Aug 24, 23:33 UTC · Aug 24, 2024Ransomware57
Attackers Exploit Public .env Files to Breach Cloud Accounts in Extortion CampaignThe Hacker News·Aug 22, 09:06 UTC · Aug 22, 2024Ransomware57
Wormable DarkRadiation Ransomware Targets Linux and Docker InstancesThe Hacker News·Jun 25, 03:05 UTC · Jun 25, 2021Ransomware60
Customizable Elpaco ransomware abuses the Everything libraryKaspersky Securelist·Nov 26, 10:00 UTC · Nov 26, 2024RansomwareCVE-2020-147260
Double-extortion ransomware attacks on the riseHelp Net Security·May 18, 00:00 UTC · May 18, 2021Ransomware60
Windows CLFS and five exploits used by ransomware operatorsKaspersky Securelist·Dec 21, 09:53 UTC · Dec 21, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and TipsThe Hacker News·Dec 23, 12:14 UTC · Dec 23, 2024RansomwareCVE-2024-12727CVE-2024-12728CVE-2024-12729+23 CVEs160
SonicWall pins attack on customer portal to undisclosed nationCyberScoop·Nov 6, 16:33 UTC · Nov 6, 2025Ransomware in the wild60
SpyLend Android malware found on Google Play enabled financial cyber crime and extortionSecurity Affairs·Feb 24, 08:57 UTC · Feb 24, 2025Ransomware45
WAFs can't give organizations the security they needHelp Net Security·Feb 16, 00:00 UTC · Feb 16, 2022Ransomware60
Cyemptive Technologies' new solution detects and eliminates sleeper ransomwareHelp Net Security·Sep 6, 00:00 UTC · Sep 6, 2019Ransomware57