Crooks exploit Oracle WebLogic flaw to deliver Sodinokibi RansomwareSecurity Affairs·May 1, 08:03 UTC · May 1, 2019RansomwareCVE-2019-272560
Hackers Found Exploiting Oracle WebLogic RCE Flaw to Spread RansomwareThe Hacker News·May 1, 07:31 UTC · May 1, 2019Ransomware in the wildCVE-2019-272560
Sodinokibi ransomware exploits WebLogic Server vulnerabilityCisco Talos·Apr 30, 18:00 UTC · Apr 30, 2019RansomwareCVE-2019-272560
Ransomware operators target CVE-2020Security Affairs·Nov 7, 17:28 UTC · Nov 7, 2020RansomwareCVE-2020-1488260
CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software FlawThe Hacker News·Oct 10, 06:41 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-61882160
Hackers Targeted Work-From-Home Technology and Avoided Adobe Products Last YearThe Record·Jan 23, 00:00 UTC · Jan 23, 2023RansomwareCVE-2019-19781CVE-2020-1472CVE-2020-0796+2 CVEs60
Initial Access Broker Involved in Log4Shell Attacks Against VMware Horizon ServersThe Hacker News·Jan 29, 06:06 UTC · Jan 29, 2022Ransomware in the wild60
June 2026 CVE LandscapeRecorded Future·Jul 17, 00:00 UTC · Jul 17, 2026Ransomware in the wildCVE-2026-35616CVE-2026-25939CVE-2020-17103+53 CVEs60
Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with BabukCisco Talos·Nov 3, 12:00 UTC · Nov 3, 2021RansomwareCVE-2021-3694260
Attackers actively exploiting Atlassian Confluence and Oracle WebLogic flawsHelp Net Security·May 2, 00:00 UTC · May 2, 2019RansomwareCVE-2019-2725CVE-2019-339660
IT threat evolution Q3 2019Kaspersky Securelist·Nov 29, 10:00 UTC · Nov 29, 2019RansomwareCVE-2017-11882CVE-2018-0802CVE-2019-2725+1 CVEs60
IT threat evolution Q1 2019. StatisticsKaspersky Securelist·May 23, 10:00 UTC · May 23, 2019Ransomware57
AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion TacticsThe Hacker News·Jan 11, 06:30 UTC · Jan 11, 2025Ransomware57
Week in review: Terrapin SSH attack, Mr. Cooper breachHelp Net Security·Dec 24, 00:00 UTC · Dec 24, 2023RansomwareCVE-2023-48795CVE-2020-1488360
Sodinokibi ransomware gang launches an eBaySecurity Affairs·Jun 3, 10:54 UTC · Jun 3, 2020Ransomware60
CyrusOne, one of the major US data center provider, hit by ransomwareSecurity Affairs·Dec 5, 07:34 UTC · Dec 5, 2019Ransomware60
Sodin Ransomware includes exploit for Windows CVE-2018Security Affairs·Jul 4, 11:59 UTC · Jul 4, 2019RansomwareCVE-2018-845360
Meet Sodinokibi, a ransomware strain that exploits a critical Oracle server flawCyberScoop·Apr 30, 19:34 UTC · Apr 30, 2019Ransomware in the wildCVE-2019-272560
Sodinokibi ransomware plagues Travelex currency exchange as investigation continuesCyberScoop·Jan 7, 20:17 UTC · Jan 7, 2020Ransomware in the wild60
NetWalker ransomware operators have made $25M since March 2020Security Affairs·Aug 4, 12:06 UTC · Aug 4, 2020RansomwareCVE-2019-11510CVE-2019-1893560
An individual hacked back the San Francisco Muni hackerSecurity Affairs·Dec 7, 15:42 UTC · Dec 7, 2016Ransomware57
San Francisco Rail System Hacker HackedKrebs on Security·Nov 29, 22:30 UTC · Nov 29, 2016Ransomware60
Cyber Group 'Gold Melody' Selling Compromised Access to Ransomware AttackersThe Hacker News·Sep 21, 09:11 UTC · Sep 21, 2023RansomwareCVE-2017-7504CVE-2019-19781CVE-2020-14750+10 CVEs60
Cryptominers, ransomware among top malware in IR engagements in Q4Cisco Talos·Nov 20, 16:00 UTC · Nov 20, 2019Ransomware in the wild60
China-Linked Storm-1175 Exploits ZeroThe Hacker News·Apr 7, 09:42 UTC · Apr 7, 2026RansomwareCVE-2023-21529CVE-2023-27351CVE-2023-27350+13 CVEs60
Quarterly Report: Incident Response trends from Fall 2020Cisco Talos·Dec 9, 14:32 UTC · Dec 9, 2020RansomwareCVE-2020-0688CVE-2020-116511CVE-2020-11652+1 CVEs60
Sodin ransomware exploits Windows vulnerability and processor architectureKaspersky Securelist·Jul 3, 10:00 UTC · Jul 3, 2019RansomwareCVE-2018-845360