De-anonymizing ransomware domains on the dark webCisco Talos·Jun 28, 12:00 UTC · Jun 28, 2022Ransomware57
Angler Exploit Kit Continues to Evade Detection: Over 90,000 Websites CompromisedPalo Alto Unit 42·Nov 1, 10:02 UTC · Nov 1, 2018Ransomware57
Attackers use domain fronting technique to target Myanmar with Cobalt StrikeCisco Talos·Nov 16, 12:00 UTC · Nov 16, 2021Ransomware57
Cryptojacking worm compromised over 2,000 Docker hostsHelp Net Security·Oct 18, 00:00 UTC · Oct 18, 2019Ransomware57
Researcher finds Russia-based ransomware network with foothold in U.S.The Record·Jan 11, 00:00 UTC · Jan 11, 2023Ransomware57
Meet the World’s Biggest ‘Bulletproof’ HosterKrebs on Security·Jul 15, 00:00 UTC · Jul 15, 2019Ransomware57
Police dismantled bulletproof hosting service provider Lolek HostedSecurity Affairs·Aug 12, 17:57 UTC · Aug 12, 2023Ransomware57
Adversary Infrastructure Report 2020: A Defender’s ViewRecorded Future·Jan 2, 00:00 UTC · Jan 2, 2026Ransomware57
Why Bulletproof Hosting is Key to Cybercrime-as-aInfosecurity Magazine·Jan 24, 12:15 UTC · Jan 24, 2024Ransomware60
Analysis of Cuba ransomware gang activity and toolingKaspersky Securelist·Sep 11, 10:00 UTC · Sep 11, 2023RansomwareCVE-2021-31207CVE-2021-34473CVE-2021-34523+8 CVEs60
Five Eyes just made life harder for bulletproof hosting providersCyberScoop·Nov 19, 21:32 UTC · Nov 19, 2025Ransomware in the wild60
Russian bulletproof hosting service Aeza Group sanctioned by US for ransomware workThe Record·Jul 1, 17:48 UTC · Jul 1, 2025Ransomware60
US, allies sanction Russian bulletproof hosting services for ransomware supportThe Record·Nov 19, 18:34 UTC · Nov 19, 2025Ransomware60
Dutch police takes down bulletproof hosting hub linked to 80+ cybercrime casesSecurity Affairs·Nov 18, 06:23 UTC · Nov 18, 2025Ransomware57
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
US Government website was hosting a JavaScript downloader delivering Cerber ransomwareSecurity Affairs·Sep 3, 07:25 UTC · Sep 3, 2017Ransomware57
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News·Jul 21, 07:34 UTC · Jul 21, 2026Ransomware in the wildCVE-2025-3248CVE-2026-33017CVE-2026-55255160
Don’t Let Your Domain Name Become a “Sitting Duck”Krebs on Security·Jul 31, 13:46 UTC · Jul 31, 2024Ransomware45
Researchers uncover potential ransomware network with U.S. connectionsCyberScoop·Jul 21, 22:15 UTC · Jul 21, 2022Ransomware in the wild60
Coordinated sanctions hit Russian bulletproof hosting providers enabling top ransomware OpsSecurity Affairs·Nov 20, 19:12 UTC · Nov 20, 2025Ransomware60
Russian bulletproof hosting service Zservers sanctioned by US for LockBit coordinationThe Record·Feb 11, 20:23 UTC · Feb 11, 2025Ransomware60
Authorities Take Down Lolek Bulletproof Hosting ProviderInfosecurity Magazine·Aug 14, 09:45 UTC · Aug 14, 2023Ransomware57
Rackspace: Play Ransomware gang used a previously unknown exploit to access its Hosted Exchange email environmentSecurity Affairs·Jan 6, 15:29 UTC · Jan 6, 2023RansomwareCVE-2022-41040CVE-2022-41082CVE-2022-4108060
Uncovering Qilin attack methods exposed through multiple casesCisco Talos·Oct 27, 02:00 UTC · Oct 27, 2025Ransomware57
Ukrainian Network FDN3 Launches Massive BruteThe Hacker News·Sep 4, 17:45 UTC · Sep 4, 2025Ransomware57
Cloud hosting firms hit by devastating ransomware attackHelp Net Security·Aug 24, 00:00 UTC · Aug 24, 2023Ransomware57
US internet hosting company appears to facilitate global cybercrime, researchers sayCyberScoop·Aug 1, 13:00 UTC · Aug 1, 2023Ransomware57
Rackspace Hosted Exchange service outage caused by security incidentHelp Net Security·Dec 5, 00:00 UTC · Dec 5, 2022Ransomware57
Cloud Hosting Provider DataResolution.net Battling Christmas Eve Ransomware AttackKrebs on Security·Feb 1, 04:33 UTC · Feb 1, 2019Ransomware57
Fielding Threats: Cyber, Influence, and Physical Threats to the 2022 FIFA World Cup in QatarRecorded Future·Jun 23, 00:00 UTC · Jun 23, 2026Ransomware60
Over 500 ESXiArgs Ransomware infections in one day in EuropeSecurity Affairs·Feb 16, 18:10 UTC · Feb 16, 2023Ransomware57
30k Internet-exposed QNAP NAS hosts impacted by CVE-2022Security Affairs·Feb 2, 06:19 UTC · Feb 2, 2023RansomwareCVE-2022-27596160
Sowing Discord: Reaping the benefits of collaboration app abuseCisco Talos·Apr 7, 12:06 UTC · Apr 7, 2021Ransomware157
Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.comKrebs on Security·Jan 23, 03:10 UTC · Jan 23, 2019Ransomware45