Search: “Shadow C2”

61 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 61 Malware 35 Threat actor 13 Vulnerability 11 Exploit / PoC 11 Data breach 5 Phishing & fraud 4 AI safety & security 2 Advisory 2 Industry 1 Policy & legal 1

SeverityAll critical 51 high 78 medium 15 low 0 info 2

Akira ransomware: From SonicWall VPN login to encryption in under four hours

Help Net SecuritySep 29, 00:00 UTC · Sep 29, 2025Ransomware CVE-2024-40766

60

Researchers Detail Emerging Cross

The Hacker NewsSep 1, 12:55 UTC · Sep 1, 2022Ransomware

57

Russian Courts Targeted by New CryWiper Data Wiper Malware Posing as Ransomware

The Hacker NewsDec 5, 13:53 UTC · Dec 5, 2022Ransomware

57

CryPy: ransomware behind Israeli lines

Kaspersky SecurelistOct 13, 09:26 UTC · Oct 13, 2016Ransomware

57

Threat Brief: WanaCrypt0r

Palo Alto Unit 42Jan 28, 22:07 UTC · Jan 28, 2022Ransomware in the wildCVE-2017-0144

60

Hacktivist group Twelve is back and targets Russian entities

Security AffairsSep 23, 05:18 UTC · Sep 23, 2024Ransomware CVE-2021-21972 CVE-2021-22005

60

Kaspersky crimeware report: FakeSG, Akira and AMOS

Kaspersky SecurelistDec 13, 10:00 UTC · Dec 13, 2023Ransomware

57

REvil ransomware actors attack Kaseya in supply chain attack

Cisco TalosJul 3, 02:03 UTC · Jul 3, 2021Ransomware CVE-2021-30116

60

U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware's Deadly Capabilities

The Hacker NewsMar 3, 09:59 UTC · Mar 3, 2023Ransomware

60

Becoming Ransomware Ready: Why Continuous Validation Is Your Best Defense

The Hacker NewsFeb 26, 11:51 UTC · Feb 26, 2025Ransomware

60

Updated PClock Ransomware Still Comes Up Short

Palo Alto Unit 42Jan 28, 22:09 UTC · Jan 28, 2022Ransomware

57

Bedep Lurking in Angler's Shadows

Cisco TalosFeb 9, 21:03 UTC · Feb 9, 2016Ransomware CVE-2015-0310

60

The Gentlemen Ransomware Expands With Rapid Affiliate Growth

Infosecurity MagazineApr 21, 14:00 UTC · Apr 21, 2026Ransomware

57

Evolution and rise of the Avaddon Ransomware-as-a

Security AffairsApr 3, 07:24 UTC · Apr 3, 2021Ransomware

57

WannaCry ransomware used in widespread attacks all over the world

Kaspersky SecurelistMay 12, 17:30 UTC · May 12, 2017Ransomware

57

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

The Hacker NewsJul 3, 18:55 UTC · Jul 3, 2026Ransomware CVE-2025-3248

60

DeadLock Ransomware Uses Polygon Smart Contracts For Proxy Rotation

Infosecurity MagazineJan 14, 14:20 UTC · Jan 14, 2026Ransomware

57

Angler Exploit Kit Continues to Evade Detection: Over 90,000 Websites Compromised

Palo Alto Unit 42Nov 1, 10:02 UTC · Nov 1, 2018Ransomware

57

Threat Spotlight: CryptoWall 4

Cisco TalosDec 10, 16:11 UTC · Dec 10, 2015Ransomware

57

New Report Exposes Vice Society's Collaboration with Rhysida Ransomware

The Hacker NewsAug 10, 03:41 UTC · Aug 10, 2023Ransomware

57

Connecting the Dots Reveals Crimeware Shake

Cisco TalosJul 7, 15:01 UTC · Jul 7, 2016Ransomware

57

Twelve: from initial compromise to ransomware and wipers

Kaspersky SecurelistSep 20, 13:33 UTC · Sep 20, 2024Ransomware CVE-2021-21972 CVE-2021-22005

60

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2026-46817 CVE-2023-4346

60

Talos IR trends Q4 2024: Web shell usage and exploitation of public

Cisco TalosJan 30, 11:00 UTC · Jan 30, 2025Ransomware

57

Attacks on web applications spike in third quarter, new Talos IR data shows

Cisco TalosOct 24, 12:00 UTC · Oct 24, 2023Ransomware

60

Key Group uses leaked builders of ransomware and wipers

Kaspersky SecurelistOct 1, 10:00 UTC · Oct 1, 2024Ransomware

57

Angler EK: More Obfuscation, Fake Extensions, and Other Nonsense

Cisco TalosJun 5, 05:05 UTC · Jun 5, 2015Ransomware

57

A new Linux version of TargetCompany ransomware targets VMware ESXi environments

Security AffairsJun 6, 17:58 UTC · Jun 6, 2024Ransomware

57

IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the most

Cisco TalosJan 24, 13:00 UTC · Jan 24, 2024Ransomware CVE-2020-1472

60

Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across Africa

The Hacker NewsJun 26, 08:08 UTC · Jun 26, 2025Ransomware

57

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

The Hacker NewsJul 6, 13:02 UTC · Jul 6, 2026Ransomware CVE-2026-48276 CVE-2026-48283 CVE-2026-48277+69 CVEs1

60

Talos IR ransomware engagements and the significance of timeliness in incident response

Cisco TalosJul 16, 10:00 UTC · Jul 16, 2025Ransomware CVE-2024-577271

60

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware

The Hacker NewsDec 9, 11:03 UTC · Dec 9, 2025Ransomware

57

Ransomware Group Uses AI Chatbot to Intensify Pressure on Victims

Infosecurity MagazineJul 22, 13:00 UTC · Jul 22, 2025Ransomware

60

New Ransomware-as-a-Service Tool ‘Thanos’ Shows Connections to ‘Hakbit’

Recorded FutureJun 29, 00:00 UTC · Jun 29, 2026Ransomware

57

Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack

The Hacker NewsOct 28, 03:54 UTC · Oct 28, 2025Ransomware

57

The U.S. CISA and FBI warn of Royal ransomware operation

Security AffairsMar 3, 10:13 UTC · Mar 3, 2023Ransomware

60

Iran-Linked APT Posed as Chaos Ransomware Member in Espionage Campaign

Infosecurity MagazineMay 6, 13:00 UTC · May 6, 2026Ransomware

57

Kraken Cryptor Ransomware: A Growing Threat Among Cybercriminals

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Ransomware

57

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

The Hacker NewsAug 4, 12:16 UTC · Aug 4, 2026Ransomware CVE-2026-50746 CVE-2026-50747 CVE-2026-50748+45 CVEs

60