New Code-injecting SOREBRECT Fileless Ransomware detected in the wildSecurity Affairs·Jun 16, 13:29 UTC · Jun 16, 2017Ransomware57
The NotPetya ransomware is a Brick Through Your WindowsSecurity Affairs·Jul 3, 05:27 UTC · Jul 3, 2017Ransomware57
New Ransomware Variant "Nyetya" Compromises Systems WorldwideCisco Talos·Jun 27, 18:02 UTC · Jun 27, 2017Ransomware57
The Gentlemen RaaS: rapid growth and a new ransomware variantKaspersky Securelist·Jun 30, 10:06 UTC · Jun 30, 2026Ransomware160
Incident response statistics and cases at educational institutions in BrazilKaspersky Securelist·Aug 3, 13:00 UTC · Aug 3, 2026Ransomware57
Uncovering Qilin attack methods exposed through multiple casesCisco Talos·Oct 27, 02:00 UTC · Oct 27, 2025Ransomware57
Quarterly Report: Incident Response Trends in Q4 2022Cisco Talos·Jan 26, 09:00 UTC · Jan 26, 2023Ransomware60
Data Keeper Ransomware - An unusual and complex Ransom-as-aSecurity Affairs·Feb 26, 08:32 UTC · Feb 26, 2018Ransomware57
New Fileless Ransomware with Code Injection Ability Detected in the WildThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2017Ransomware57
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain CredentialsThe Hacker News·Jul 3, 14:36 UTC · Jul 3, 2026RansomwareCVE-2025-577760
Targeting of Olympic Games IT Infrastructure Remains UnattributedRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Ransomware57
Vice Society: Profiling a Persistent Threat to the Education SectorPalo Alto Unit 42·Jun 5, 17:12 UTC · Jun 5, 2024RansomwareCVE-2021-3452760
When Partial Protection is Zero Protection: The MFA Blind Spots No One Talks AboutThe Hacker News·Mar 10, 12:56 UTC · Mar 10, 2023Ransomware60
Quarterly Report: Incident Response trends in Q1 2022Cisco Talos·Apr 26, 13:11 UTC · Apr 26, 2022Ransomware in the wildCVE-2021-44228CVE-2021-45046CVE-2021-22204+1 CVEs60
Quarterly Report: Incident Response trends from Q3 2021Cisco Talos·Oct 28, 12:00 UTC · Oct 28, 2021RansomwareCVE-2021-3011660
Connecting the Bots - Hancitor fuels Cuba Ransomware OperationsSecurity Affairs·May 7, 09:59 UTC · May 7, 2021Ransomware57
Your best defense against ransomware: Find the early warning signsHelp Net Security·Sep 23, 00:00 UTC · Sep 23, 2020Ransomware57
OlympicDestroyer is here to trick the industryKaspersky Securelist·Mar 8, 17:00 UTC · Mar 8, 2018Ransomware57
Qilin Ransomware Affiliates Abuse CVE-2026Security Affairs·Jul 21, 16:08 UTC · Jul 21, 2026Ransomware in the wildCVE-2026-025760
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial AccessThe Hacker News·Jul 21, 14:04 UTC · Jul 21, 2026RansomwareCVE-2026-025760
GodDamn Ransomware Uses PoisonX to Blind Security SoftwareSecurity Affairs·Jul 9, 18:11 UTC · Jul 9, 2026Ransomware57
Ransomware in 2025: Blending in is the strategyCisco Talos·Mar 31, 10:00 UTC · Mar 31, 2026Ransomware57
A Multi-Method Approach to Identifying Rogue Cobalt Strike ServersRecorded Future·Aug 21, 00:00 UTC · Aug 21, 2025Ransomware57
Storm-2603 Deploys DNS-Controlled Backdoor in Warlock and LockBit Ransomware AttacksThe Hacker News·Aug 6, 14:41 UTC · Aug 6, 2025RansomwareCVE-2025-49706CVE-2025-4970460
Talos IR ransomware engagements and the significance of timeliness in incident responseCisco Talos·Jul 16, 10:00 UTC · Jul 16, 2025RansomwareCVE-2024-57727160
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
Medusa ransomware hit over 300 critical infrastructure organizations until February 2025Security Affairs·Mar 13, 08:49 UTC · Mar 13, 2025RansomwareCVE-2024-1709CVE-2023-4878860
Analyzing the familiar tools used by the Crypt Ghouls hacktivistsKaspersky Securelist·Oct 18, 10:00 UTC · Oct 18, 2024Ransomware57
Analysis of the BlackJack group: techniques, tools, and similarities with TwelveKaspersky Securelist·Sep 25, 10:00 UTC · Sep 25, 2024Ransomware57
Twelve: from initial compromise to ransomware and wipersKaspersky Securelist·Sep 20, 13:33 UTC · Sep 20, 2024RansomwareCVE-2021-21972CVE-2021-2200560
New Rust-Based Ransomware Cicada3301 Targets Windows and Linux SystemsThe Hacker News·Sep 3, 13:16 UTC · Sep 3, 2024Ransomware57
LockBit 2.0: How This RaaS Operates and How to Protect Against ItPalo Alto Unit 42·Jun 5, 20:38 UTC · Jun 5, 2024Ransomware57
IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the mostCisco Talos·Jan 24, 13:00 UTC · Jan 24, 2024RansomwareCVE-2020-147260
FBI and CISA published a new advisory on AvosLocker ransomwareSecurity Affairs·Oct 13, 10:55 UTC · Oct 13, 2023Ransomware57
Think Your MFA and PAM Solutions Protect You? Think AgainThe Hacker News·Sep 18, 12:21 UTC · Sep 18, 2023Ransomware60
New Report Exposes Vice Society's Collaboration with Rhysida RansomwareThe Hacker News·Aug 10, 03:41 UTC · Aug 10, 2023Ransomware57