China-Linked Espionage Tools Used in Recent Ransomware AttackInfosecurity Magazine·Feb 14, 10:00 UTC · Feb 14, 2025Ransomware57
Iranian cyber espionage disguised as a Chaos Ransomware attackSecurity Affairs·May 6, 14:19 UTC · May 6, 2026Ransomware57
Iran-Linked MuddyWater Poses as Ransomware Gang to Mask EspionageInfosecurity Magazine·Jun 24, 12:00 UTC · Jun 24, 2026Ransomware57
Fielding Threats: Cyber, Influence, and Physical Threats to the 2022 FIFA World Cup in QatarRecorded Future·Jun 23, 00:00 UTC · Jun 23, 2026Ransomware60
RA World Ransomware Attack in South Asia Links to Chinese Espionage ToolsetThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2025RansomwareCVE-2024-0012CVE-2023-20198CVE-2023-2027360
North Korean Hackers Shift from Cyber Espionage to Ransomware AttacksThe Hacker News·Jul 26, 08:40 UTC · Jul 26, 2024Ransomware60
Equipping the Education Sector With Threat Intelligence to Defend Against CyberattacksRecorded Future·Sep 1, 00:00 UTC · Sep 1, 2025Ransomware60
From Ransomware to Cyber Espionage: 55 ZeroThe Hacker News·Mar 22, 04:19 UTC · Mar 22, 2023Ransomware in the wildCVE-2022-24682CVE-2022-1040CVE-2022-30190+7 CVEs160
How attackers weaponize communications networksHelp Net Security·Sep 11, 00:00 UTC · Sep 11, 2025Ransomware60
China-linked APTs' tool employed in RA World Ransomware attackSecurity Affairs·Feb 13, 15:49 UTC · Feb 13, 2025RansomwareCVE-2024-001260
North Korean hacker used hospital ransomware attacks to fund espionageCyberScoop·Jul 25, 20:12 UTC · Jul 25, 2024Ransomware in the wild60
State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage AttacksThe Hacker News·Jun 25, 04:04 UTC · Jun 25, 2022Ransomware57
Researchers Link 'Sharpshooter' Cyber Attacks to North Korean HackersThe Hacker News·Mar 4, 15:55 UTC · Mar 4, 2019Ransomware60
Iran-Linked APT Posed as Chaos Ransomware Member in Espionage CampaignInfosecurity Magazine·May 6, 13:00 UTC · May 6, 2026Ransomware57
Week in review: React, Node.js flaw patched, ransomware intrusion exposes espionage footholdHelp Net Security·Dec 7, 00:00 UTC · Dec 7, 2025RansomwareCVE-2025-48633CVE-2025-48572CVE-2025-5518260
How a noisy ransomware intrusion exposed a long-term espionage footholdHelp Net Security·Dec 2, 00:00 UTC · Dec 2, 2025RansomwareCVE-2025-53770CVE-2024-21887CVE-2025-4427+2 CVEs60
North Korean cyber-espionage group ScarCruft adds ransomware in recent attackThe Record·Aug 8, 14:01 UTC · Aug 8, 2025Ransomware57
RedCurl Shifts from Espionage to Ransomware with FirstThe Hacker News·Mar 26, 16:46 UTC · Mar 26, 2025Ransomware57
Chinese State Actors Use Ransomware to Conceal Real IntentInfosecurity Magazine·Jun 27, 09:30 UTC · Jun 27, 2024Ransomware60
SapphireStealer Malware: A Gateway to Espionage and Ransomware OperationsThe Hacker News·Aug 31, 14:15 UTC · Aug 31, 2023Ransomware57
Iran-Linked Seedworm APT target orgs in the Middle EastSecurity Affairs·Dec 15, 10:56 UTC · Dec 15, 2021Ransomware57
FBI aims for stronger cyber strategy as US grapples with SolarWinds falloutCyberScoop·Jan 13, 21:29 UTC · Jan 13, 2021Ransomware in the wild60
Semiconductor Companies Targeted by RansomwareRecorded Future·Jun 29, 00:00 UTC · Jun 29, 2026Ransomware60
Evaluating Mexico’s New Cybersecurity PlanRecorded Future·Jun 24, 00:00 UTC · Jun 24, 2026Ransomware60
ToolShell bug used by Chinese attackers against governments in Africa, South AmericaThe Record·Oct 22, 19:04 UTC · Oct 22, 2025RansomwareCVE-2025-53770CVE-2025-4970660
Reading the ENISA Threat Landscape 2025 reportSecurity Affairs·Oct 6, 06:51 UTC · Oct 6, 2025Ransomware57
Redefining IABs: Impacts of compartmentalization on threat tracking and modelingCisco Talos·May 13, 10:00 UTC · May 13, 2025Ransomware60
Inside Operation Destabilise: How a ransomware investigation linked Russian money laundering and streetThe Record·Dec 23, 00:44 UTC · Dec 23, 2024Ransomware60
US indicts alleged North Korean state hacker for ransomware attacks on hospitalsThe Record·Jul 25, 18:49 UTC · Jul 25, 2024Ransomware57
The 3 most common post-compromise tactics on network infrastructureCisco Talos·Mar 7, 15:00 UTC · Mar 7, 2024Ransomware60
Crimeware Group Asylum Ambuscade Ventures Into CyberInfosecurity Magazine·Jul 10, 17:00 UTC · Jul 10, 2023Ransomware57
Iranian government hackers using Chaos ransomware as cover, researchers sayThe Record·Jun 26, 00:00 UTC · Jun 26, 2026Ransomware157
Google says 90 zero-days exploited in 2025 as commercial vendor activity growsThe Record·Mar 5, 15:01 UTC · Mar 5, 2026Ransomware in the wildCVE-2025-21590CVE-2025-0282CVE-2025-61882+2 CVEs60
Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber OperationsThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Ransomware60