Windows Quick Assist Exploited in Ransomware AttacksInfosecurity Magazine·May 16, 17:15 UTC · May 16, 2024Ransomware57
Cybercriminals Exploiting Microsoft’s Quick Assist Feature in Ransomware AttacksThe Hacker News·May 15, 00:00 UTC · May 15, 2024Ransomware57
Attackers Leverage Microsoft Teams and Quick Assist for AccessInfosecurity Magazine·Mar 3, 16:30 UTC · Mar 3, 2025Ransomware60
Two ransomware groups abuse Microsoft’s Office 365 platform to gain access to target organizationsSecurity Affairs·Jan 22, 20:49 UTC · Jan 22, 2025Ransomware157
Talos IR ransomware engagements and the significance of timeliness in incident responseCisco Talos·Jul 16, 10:00 UTC · Jul 16, 2025RansomwareCVE-2024-57727160
Notorious crooks broke into a company network in 48 minutes. Here’s how.Ars Technica · Security·Feb 21, 18:17 UTC · Feb 21, 2025Ransomware60
Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social EngineeringThe Hacker News·Dec 9, 17:44 UTC · Dec 9, 2024Ransomware57
New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate NetworksThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2024RansomwareCVE-2024-4076660
Black Basta Ransomware May Have Exploited MS Windows ZeroThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2024Ransomware in the wildCVE-2024-2616960
Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 AttacksThe Hacker News·Jul 16, 17:30 UTC · Jul 16, 2025RansomwareCVE-2024-21762CVE-2024-55591CVE-2024-57727160
Researchers Link CACTUS Ransomware Tactics to Former Black Basta AffiliatesThe Hacker News·Mar 5, 04:09 UTC · Mar 5, 2025Ransomware57
New Chaos Ransomware Emerges, Launches Wave of AttacksInfosecurity Magazine·Jul 25, 10:35 UTC · Jul 25, 2025Ransomware57
Russian Ransomware Groups Deploy Email Bombing and Teams VishingInfosecurity Magazine·Jan 21, 11:30 UTC · Jan 21, 2025Ransomware57
The key to making the US cyber strategy work: boots on the groundCyberScoop·May 4, 19:24 UTC · May 4, 2023Ransomware60
Ransomware groups pose as fake tech support over TeamsCyberScoop·Jan 21, 22:52 UTC · Jan 21, 2025Ransomware in the wild60
5 BCDR Essentials for Effective Ransomware DefenseThe Hacker News·May 15, 00:00 UTC · May 15, 2025Ransomware60
How do I select cyber insurance for my business?Help Net Security·Jan 8, 13:27 UTC · Jan 8, 2024Ransomware57
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AIThe Hacker News·Jun 2, 03:39 UTC · Jun 2, 2026Ransomware in the wildCVE-2026-0257CVE-2026-8732CVE-2026-27771+31 CVEs60
Stopping ransomware before it starts: Lessons from Cisco Talos Incident ResponseCisco Talos·Sep 8, 10:00 UTC · Sep 8, 2025Ransomware57
Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. VictimsThe Hacker News·Aug 12, 04:39 UTC · Aug 12, 2025Ransomware60
⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger ImpactThe Hacker News·May 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-25015CVE-2025-22224CVE-2025-22225+18 CVEs60
Ransomware gangs don't need control system access to disrupt industrial productionHelp Net Security·Aug 11, 00:00 UTC · Aug 11, 2026Ransomware57
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and EdgeThe Hacker News·Jul 23, 13:11 UTC · Jul 23, 2026Ransomware57
UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion CampaignThe Hacker News·Jun 8, 09:58 UTC · Jun 8, 2026Ransomware57
MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware AttackThe Hacker News·May 7, 08:46 UTC · May 7, 2026Ransomware57
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & MoreThe Hacker News·Mar 19, 14:25 UTC · Mar 19, 2026Ransomware in the wildCVE-2024-55591CVE-2025-71257CVE-2025-71258+4 CVEs60
Fake Tech Support Spam Deploys Customized Havoc C2 Across OrganizationsThe Hacker News·Mar 3, 17:15 UTC · Mar 3, 2026Ransomware57
Microsoft warns of a 32% surge in identity hacks, mainly driven by stolen passwordsThe Record·Oct 16, 16:37 UTC · Oct 16, 2025RansomwareCVE-2024-5062360
CountLoader Broadens Russian Ransomware Operations With MultiThe Hacker News·Sep 19, 03:44 UTC · Sep 19, 2025Ransomware60
SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware HackersThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2025Ransomware in the wildCVE-2024-4076660
Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 TunnelingThe Hacker News·Sep 3, 04:55 UTC · Sep 3, 2025Ransomware157
⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & MoreThe Hacker News·Aug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948CVE-2025-54987CVE-2025-8088+30 CVEs60
After BlackSuit is taken down, new ransomware group Chaos emergesArs Technica · Security·Jul 26, 00:21 UTC · Jul 26, 2025Ransomware57
Security Affairs newsletter Round 525 by Pierluigi PaganiniSecurity Affairs·May 31, 21:54 UTC · May 31, 2025Ransomware in the wild60
DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer EndpointsThe Hacker News·May 30, 03:58 UTC · May 30, 2025RansomwareCVE-2024-57727CVE-2024-57728CVE-2024-5772660
Ransomware attackers are "vishing" organizations via Microsoft TeamsHelp Net Security·Jan 21, 00:00 UTC · Jan 21, 2025Ransomware60
Ransomware Attackers Target Industries with Low Downtime ToleranceInfosecurity Magazine·Dec 20, 09:15 UTC · Dec 20, 2024Ransomware60
Security Affairs newsletter Round 481 by Pierluigi PaganiniSecurity Affairs·Jul 21, 11:59 UTC · Jul 21, 2024RansomwareCVE-2024-3811260