Threat Roundup for September 16 to September 23Cisco Talos·Sep 23, 22:06 UTC · Sep 23, 2022Ransomware57
Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with BabukCisco Talos·Nov 3, 12:00 UTC · Nov 3, 2021RansomwareCVE-2021-3694260
ProxyLogon Microsoft Exchange exploit is completely out of the bagSecurity Affairs·Mar 15, 12:56 UTC · Mar 15, 2021Ransomware in the wildCVE-2021-2685560
New Avalon Malware Framework Packs CrownX Ransomware CapabilitiesThe Hacker News·Jul 3, 18:55 UTC · Jul 3, 2026RansomwareCVE-2025-324860
Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over DevicesThe Hacker News·Oct 22, 04:20 UTC · Oct 22, 2025RansomwareCVE-2025-9242CVE-2025-3600CVE-2025-3660460
Executive Overview of Russian Aggression Against UkraineRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Ransomware57
Chinese Hackers Exploit Cityworks Flaw to Target US Local GovernmentsInfosecurity Magazine·May 26, 12:00 UTC · May 26, 2025Ransomware in the wildCVE-2025-0994160
Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote AccessThe Hacker News·May 19, 14:38 UTC · May 19, 2025Ransomware57
Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangsCisco Talos·Apr 23, 10:00 UTC · Apr 23, 2025Ransomware60
Key Group uses leaked builders of ransomware and wipersKaspersky Securelist·Oct 1, 10:00 UTC · Oct 1, 2024Ransomware57
IR Trends: Ransomware on the rise, while technology becomes most targeted sectorCisco Talos·Jul 25, 10:00 UTC · Jul 25, 2024Ransomware160
Trigona Ransomware targets Microsoft SQL serversSecurity Affairs·Apr 20, 07:03 UTC · Apr 20, 2023Ransomware57
Attacks on Exchange servers expand from nationThe Record·Nov 17, 06:58 UTC · Nov 17, 2022Ransomware in the wild60
An Early Interview With The Dark Overlord: The Hacking Group That Forever Changed Cyber ExtortionThe Record·Nov 17, 01:18 UTC · Nov 17, 2022Ransomware57
News URSNIF variant doesn't support banking featuresSecurity Affairs·Oct 21, 07:50 UTC · Oct 21, 2022Ransomware57
Threat Roundup for February 18 to February 25Cisco Talos·Feb 24, 11:00 UTC · Feb 24, 2022Ransomware157
Threat Roundup for February 11 to February 18Cisco Talos·Feb 18, 22:33 UTC · Feb 18, 2022Ransomware57
Ransomware gang uses a Python script to encrypt VMware ESXi serversSecurity Affairs·Oct 5, 16:13 UTC · Oct 5, 2021Ransomware160
Conti ransomware gang targets Microsoft Exchange servers with ProxyShell exploitsSecurity Affairs·Sep 3, 17:00 UTC · Sep 3, 2021RansomwareCVE-2021-34473CVE-2021-34523CVE-2021-3120760
Hackers Exploit IT Monitoring Tool Centreon to Target Several French EntitiesThe Hacker News·Feb 17, 05:47 UTC · Feb 17, 2021Ransomware57
Your best defense against ransomware: Find the early warning signsHelp Net Security·Sep 23, 00:00 UTC · Sep 23, 2020Ransomware57
FireEye's new software releases allow for detection and investigation of attacks against serversHelp Net Security·Aug 5, 00:00 UTC · Aug 5, 2019Ransomware60
How companies – and the hackers themselvesCyberScoop·Apr 18, 23:56 UTC · Apr 18, 2019Ransomware in the wild60
Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCEThe Hacker News·Aug 3, 16:06 UTC · Aug 3, 2026Ransomware in the wildCVE-2026-1256960