Raspberry Robin Operators Selling Cybercriminals Access to Thousands of EndpointsThe Hacker News·Oct 28, 13:07 UTC · Oct 28, 2022Ransomware57
Raspberry Robin operators are selling initial access to compromised enterprise networks to ransomware gangsSecurity Affairs·Oct 27, 21:05 UTC · Oct 27, 2022Ransomware57
Experts link Raspberry Robin to Evil Corp cybercrime gangSecurity Affairs·Sep 2, 12:56 UTC · Sep 2, 2022Ransomware57
Raspberry Robin Worm Actors Linked to Clop, LockBit Ransomware GroupsInfosecurity Magazine·Oct 28, 16:00 UTC · Oct 28, 2022Ransomware57
Researchers Uncover ~200 Unique C2 Domains Linked to Raspberry Robin Access BrokerThe Hacker News·Mar 26, 04:30 UTC · Mar 26, 2025Ransomware57
Raspberry Robin Adopts Unique Evasion TechniquesInfosecurity Magazine·Apr 19, 17:00 UTC · Apr 19, 2023RansomwareCVE-2020-1054CVE-2021-173260
Defending against USB drive attacks with WazuhThe Hacker News·Mar 5, 14:08 UTC · Mar 5, 2025Ransomware60
Microsoft Links Raspberry Robin USB Worm to Russian Evil Corp HackersThe Hacker News·Sep 2, 06:09 UTC · Sep 2, 2022Ransomware57
Raspberry Robin Distributed Through Windows Script FilesInfosecurity Magazine·Apr 11, 14:00 UTC · Apr 11, 2024Ransomware57
Raspberry Robin Worm Strikes Again, Targeting Telecom and Government SystemsThe Hacker News·Dec 21, 12:23 UTC · Dec 21, 2022Ransomware57
Researchers Warn of Raspberry Robin's Worm Targeting Windows UsersThe Hacker News·Jul 8, 18:53 UTC · Jul 8, 2022Ransomware57
SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and OthersThe Hacker News·Aug 8, 04:01 UTC · Aug 8, 2025RansomwareCVE-2024-3819660
THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25The Hacker News·Dec 2, 11:25 UTC · Dec 2, 2024RansomwareCVE-2024-9680CVE-2024-49039CVE-2024-11680+14 CVEs60
TrueBot infections were observed in Clop ransomware attacksSecurity Affairs·Dec 12, 07:52 UTC · Dec 12, 2022RansomwareCVE-2022-3119960
Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p RansomwareThe Hacker News·Apr 29, 04:05 UTC · Apr 29, 2023Ransomware in the wildCVE-2023-27351CVE-2023-27532CVE-2023-138960
Microsoft Blames Clop Affiliate for PaperCut AttacksInfosecurity Magazine·Apr 27, 10:30 UTC · Apr 27, 2023Ransomware in the wild60
Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress SitesThe Hacker News·Jun 19, 17:13 UTC · Jun 19, 2026Ransomware60
For the first time, a RomCom payload has been observed being distributed via SocGholish.Security Affairs·Nov 26, 20:16 UTC · Nov 26, 2025Ransomware57
Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber AttacksThe Hacker News·Jul 18, 08:54 UTC · Jul 18, 2024Ransomware57
Alarming Surge in TrueBot Activity Revealed with New Delivery VectorsThe Hacker News·Jul 12, 03:35 UTC · Jul 12, 2023RansomwareCVE-2022-3119960
US and Canadian Authorities Warn of Increased Truebot ActivityInfosecurity Magazine·Jul 7, 10:30 UTC · Jul 7, 2023RansomwareCVE-2022-3119960
Experts warn of a surge of TrueBot activity in May 2023Security Affairs·Jun 5, 10:25 UTC · Jun 5, 2023RansomwareCVE-2022-3119960
Hackers use PaperCut printer vulnerability to spread Clop ransomwareThe Record·Apr 27, 15:53 UTC · Apr 27, 2023RansomwareCVE-2023-27350CVE-2023-27351160
PaperCut exploits used to deliver Cl0p & LockBit ransomwareSecurity Affairs·Apr 27, 14:36 UTC · Apr 27, 2023RansomwareCVE-2023-27350CVE-2023-27351160
PaperCut vulnerabilities leveraged by Clop, LockBit ransomware affiliatesHelp Net Security·Apr 27, 00:00 UTC · Apr 27, 2023RansomwareCVE-2023-27350CVE-2023-2735160
Clop Ransomware Group Exploits GoAnywhere MFT FlawInfosecurity Magazine·Mar 29, 17:00 UTC · Mar 29, 2023RansomwareCVE-2023-066960
LockBit Claims Ransomware Attack on ContinentalInfosecurity Magazine·Nov 4, 16:00 UTC · Nov 4, 2022Ransomware57