Head Mare hacktivists: attacks on companies in Russia and BelarusKaspersky Securelist·Sep 2, 10:00 UTC · Sep 2, 2024RansomwareCVE-2023-38831160
Avos ransomware group expands with new attack arsenalCisco Talos·Jun 21, 11:58 UTC · Jun 21, 2022RansomwareCVE-2021-44228CVE-2021-45046CVE-2021-45105+1 CVEs60
IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the mostCisco Talos·Jan 24, 13:00 UTC · Jan 24, 2024RansomwareCVE-2020-147260
Hackers Exploiting SimpleHelp RMM Flaws for Persistent Access and RansomwareThe Hacker News·Feb 7, 05:20 UTC · Feb 7, 2025RansomwareCVE-2024-57726CVE-2024-57727CVE-2024-5772860
Head Mare hacktivist group targets Russia and BelarusSecurity Affairs·Sep 4, 14:22 UTC · Sep 4, 2024RansomwareCVE-2023-3883160
2022 Top Five Immediate Threats in Geopolitical ContextThe Hacker News·Dec 28, 16:24 UTC · Dec 28, 2022Ransomware160
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal InfrastructureThe Hacker News·Feb 9, 08:37 UTC · Feb 9, 2026RansomwareCVE-2025-55182CVE-2025-29927160
How a noisy ransomware intrusion exposed a long-term espionage footholdHelp Net Security·Dec 2, 00:00 UTC · Dec 2, 2025RansomwareCVE-2025-53770CVE-2024-21887CVE-2025-4427+2 CVEs60
ToolShell bug used by Chinese attackers against governments in Africa, South AmericaThe Record·Oct 22, 19:04 UTC · Oct 22, 2025RansomwareCVE-2025-53770CVE-2025-4970660
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 BitThe Hacker News·Sep 22, 15:16 UTC · Sep 22, 2025Ransomware in the wildCVE-2025-10585CVE-2025-55241CVE-2025-10035+14 CVEs160
FBI, CISA Warn of Rising AvosLocker Ransomware Attacks Against Critical InfrastructureThe Hacker News·Oct 22, 03:10 UTC · Oct 22, 2023Ransomware60
ShadowSyndicate: A New Cybercrime Group Linked to 7 Ransomware FamiliesThe Hacker News·Sep 30, 04:03 UTC · Sep 30, 2023Ransomware in the wild60
Staying ahead of the "professionals": The service-oriented ransomware crime industryHelp Net Security·Jul 12, 00:00 UTC · Jul 12, 2023Ransomware in the wild60
Buhti ransomware op uses rebranded LockBit and Babuk payloadsSecurity Affairs·May 27, 10:56 UTC · May 27, 2023RansomwareCVE-2023-27350CVE-2022-4798660
Advanced threat predictions for 2023Kaspersky Securelist·Nov 14, 08:00 UTC · Nov 14, 2022Ransomware in the wild60
Quarterly Report: Incident Response Trends in Q3 2022Cisco Talos·Oct 25, 12:00 UTC · Oct 25, 2022RansomwareCVE-2020-147260
ThreatsCisco Talos·Sep 9, 18:46 UTC · Sep 9, 2022Ransomware in the wildCVE-2025-20333CVE-2025-20362CVE-2024-457760
Talos Threat SpotlightsCisco Talos·Apr 14, 00:00 UTC · Apr 14, 2022Ransomware in the wildCVE-2024-4577160
Russian cybercrime continues as government-backed attacks on companies dwindle, CrowdStrike saysCyberScoop·Sep 8, 14:29 UTC · Sep 8, 2021Ransomware in the wild60