GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking AttackThe Hacker News·May 29, 05:25 UTC · May 29, 2024RansomwareCVE-2021-44228CVE-2023-24860CVE-2023-3601060
AvosLocker Ransomware Variant Using New Trick to Disable Antivirus ProtectionThe Hacker News·May 3, 05:50 UTC · May 3, 2022RansomwareCVE-2021-40539CVE-2021-4422860
CISA, FBI Warn of Medusa Ransomware Impacting Critical InfrastructureInfosecurity Magazine·Mar 13, 16:30 UTC · Mar 13, 2025RansomwareCVE-2024-1709CVE-2023-4878860
Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical VulnerabilityThe Hacker News·Aug 30, 03:26 UTC · Aug 30, 2023RansomwareCVE-2023-351960
FIN8-linked actor targets Citrix NetScaler systemsSecurity Affairs·Aug 29, 15:14 UTC · Aug 29, 2023RansomwareCVE-2023-351960
Ransomware group exploits Citrix NetScaler systems for initial accessHelp Net Security·Aug 29, 00:00 UTC · Aug 29, 2023Ransomware in the wildCVE-2023-351960
Ransomware operators target CVE-2020Security Affairs·Nov 7, 17:28 UTC · Nov 7, 2020RansomwareCVE-2020-1488260
Review: Group-IB Threat Hunting FrameworkHelp Net Security·Jun 15, 08:51 UTC · Jun 15, 2021Ransomware60
Quarterly Report: Incident Response trends in Q1 2022Cisco Talos·Apr 26, 13:11 UTC · Apr 26, 2022Ransomware in the wildCVE-2021-44228CVE-2021-45046CVE-2021-22204+1 CVEs60
Quarterly Report: Incident Response Trends in Q4 2022Cisco Talos·Jan 26, 09:00 UTC · Jan 26, 2023Ransomware60
Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliatesSecurity Affairs·Jul 9, 12:37 UTC · Jul 9, 2025Ransomware60
Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the GlobeThe Hacker News·Jan 9, 14:12 UTC · Jan 9, 2024Ransomware60
Hackers Behind Cuba Ransomware Attacks Using New RAT MalwareThe Hacker News·Aug 12, 02:23 UTC · Aug 12, 2022RansomwareCVE-2022-24521CVE-2020-147260
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 BitThe Hacker News·Sep 22, 15:16 UTC · Sep 22, 2025Ransomware in the wildCVE-2025-10585CVE-2025-55241CVE-2025-10035+14 CVEs160
Quarterly Report: Incident Response trends from Spring 2021Cisco Talos·Jun 10, 12:00 UTC · Jun 10, 2021RansomwareCVE-2021-26855CVE-2021-26857CVE-2021-26858+4 CVEs60
Linux variant of Qilin Ransomware targets Windows via remote management tools and BYOVDSecurity Affairs·Oct 27, 10:45 UTC · Oct 27, 2025Ransomware60
Report: Criminals loved to target PowerPoint in 2017CyberScoop·Mar 27, 22:12 UTC · Mar 27, 2018Ransomware in the wildCVE-2017-019960
Medusa ransomware hit over 300 critical infrastructure organizations until February 2025Security Affairs·Mar 13, 08:49 UTC · Mar 13, 2025RansomwareCVE-2024-1709CVE-2023-4878860
THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25The Hacker News·Dec 2, 11:25 UTC · Dec 2, 2024RansomwareCVE-2024-9680CVE-2024-49039CVE-2024-11680+14 CVEs60
The Gentlemen RaaS: rapid growth and a new ransomware variantKaspersky Securelist·Jun 30, 10:06 UTC · Jun 30, 2026Ransomware160
14,971 WordPress Sites Cleaned in Global SocGholish TakedownSecurity Affairs·Jun 19, 13:41 UTC · Jun 19, 2026Ransomware60
⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-29824CVE-2024-11859CVE-2025-3102+17 CVEs60
U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 SystemsThe Hacker News·May 6, 07:41 UTC · May 6, 2025RansomwareCVE-2019-1151060
IT threat evolution Q3 2020Kaspersky Securelist·Nov 20, 10:00 UTC · Nov 20, 2020RansomwareCVE-2020-0986CVE-2020-138060
Vice Society: Profiling a Persistent Threat to the Education SectorPalo Alto Unit 42·Jun 5, 17:12 UTC · Jun 5, 2024RansomwareCVE-2021-3452760
IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the mostCisco Talos·Jan 24, 13:00 UTC · Jan 24, 2024RansomwareCVE-2020-147260
Black Kingdom ransomwareKaspersky Securelist·Jun 17, 09:42 UTC · Jun 17, 2021RansomwareCVE-2021-27065CVE-2019-11510CVE-2021-26855+2 CVEs60
IR Trends: Ransomware on the rise, while technology becomes most targeted sectorCisco Talos·Jul 25, 10:00 UTC · Jul 25, 2024Ransomware60