Search: “Shadow C2”

41 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 61 Malware 35 Threat actor 13 Vulnerability 11 Exploit / PoC 11 Data breach 5 Phishing & fraud 4 AI safety & security 2 Advisory 2 Industry 1 Policy & legal 1

SeverityAll critical 51 high 78 medium 15 low 0 info 2

Researchers Detail Emerging Cross

The Hacker NewsSep 1, 12:55 UTC · Sep 1, 2022Ransomware

57

Russian Courts Targeted by New CryWiper Data Wiper Malware Posing as Ransomware

The Hacker NewsDec 5, 13:53 UTC · Dec 5, 2022Ransomware

57

CryPy: ransomware behind Israeli lines

Kaspersky SecurelistOct 13, 09:26 UTC · Oct 13, 2016Ransomware

57

Threat Brief: WanaCrypt0r

Palo Alto Unit 42Jan 28, 22:07 UTC · Jan 28, 2022Ransomware in the wildCVE-2017-0144

60

Kaspersky crimeware report: FakeSG, Akira and AMOS

Kaspersky SecurelistDec 13, 10:00 UTC · Dec 13, 2023Ransomware

57

Updated PClock Ransomware Still Comes Up Short

Palo Alto Unit 42Jan 28, 22:09 UTC · Jan 28, 2022Ransomware

57

Bedep Lurking in Angler's Shadows

Cisco TalosFeb 9, 21:03 UTC · Feb 9, 2016Ransomware CVE-2015-0310

60

The Gentlemen Ransomware Expands With Rapid Affiliate Growth

Infosecurity MagazineApr 21, 14:00 UTC · Apr 21, 2026Ransomware

57

Evolution and rise of the Avaddon Ransomware-as-a

Security AffairsApr 3, 07:24 UTC · Apr 3, 2021Ransomware

57

WannaCry ransomware used in widespread attacks all over the world

Kaspersky SecurelistMay 12, 17:30 UTC · May 12, 2017Ransomware

57

DeadLock Ransomware Uses Polygon Smart Contracts For Proxy Rotation

Infosecurity MagazineJan 14, 14:20 UTC · Jan 14, 2026Ransomware

57

Angler Exploit Kit Continues to Evade Detection: Over 90,000 Websites Compromised

Palo Alto Unit 42Nov 1, 10:02 UTC · Nov 1, 2018Ransomware

57

Threat Spotlight: CryptoWall 4

Cisco TalosDec 10, 16:11 UTC · Dec 10, 2015Ransomware

57

New Report Exposes Vice Society's Collaboration with Rhysida Ransomware

The Hacker NewsAug 10, 03:41 UTC · Aug 10, 2023Ransomware

57

Connecting the Dots Reveals Crimeware Shake

Cisco TalosJul 7, 15:01 UTC · Jul 7, 2016Ransomware

57

Talos IR trends Q4 2024: Web shell usage and exploitation of public

Cisco TalosJan 30, 11:00 UTC · Jan 30, 2025Ransomware

57

Key Group uses leaked builders of ransomware and wipers

Kaspersky SecurelistOct 1, 10:00 UTC · Oct 1, 2024Ransomware

57

Angler EK: More Obfuscation, Fake Extensions, and Other Nonsense

Cisco TalosJun 5, 05:05 UTC · Jun 5, 2015Ransomware

57

A new Linux version of TargetCompany ransomware targets VMware ESXi environments

Security AffairsJun 6, 17:58 UTC · Jun 6, 2024Ransomware

57

Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across Africa

The Hacker NewsJun 26, 08:08 UTC · Jun 26, 2025Ransomware

57

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

The Hacker NewsJul 6, 13:02 UTC · Jul 6, 2026Ransomware CVE-2026-48276 CVE-2026-48283 CVE-2026-48277+69 CVEs1

60

Talos IR ransomware engagements and the significance of timeliness in incident response

Cisco TalosJul 16, 10:00 UTC · Jul 16, 2025Ransomware CVE-2024-577271

60

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware

The Hacker NewsDec 9, 11:03 UTC · Dec 9, 2025Ransomware

57

New Ransomware-as-a-Service Tool ‘Thanos’ Shows Connections to ‘Hakbit’

Recorded FutureJun 29, 00:00 UTC · Jun 29, 2026Ransomware

57

Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack

The Hacker NewsOct 28, 03:54 UTC · Oct 28, 2025Ransomware

57

Iran-Linked APT Posed as Chaos Ransomware Member in Espionage Campaign

Infosecurity MagazineMay 6, 13:00 UTC · May 6, 2026Ransomware

57

Kraken Cryptor Ransomware: A Growing Threat Among Cybercriminals

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Ransomware

57

Threat Roundup for August 17

Cisco TalosAug 24, 18:44 UTC · Aug 24, 2018Ransomware

57

In ExPetr/Petya’s shadow, FakeCry ransomware wave hits Ukraine

Kaspersky SecurelistJul 4, 18:22 UTC · Jul 4, 2017Ransomware

57

Connecting the Bots - Hancitor fuels Cuba Ransomware Operations

Security AffairsMay 7, 09:59 UTC · May 7, 2021Ransomware

57

Unmasking the new Chaos RaaS group attacks

Cisco TalosJul 24, 10:00 UTC · Jul 24, 2025Ransomware

57

How Attackers Can Own a Business Without Touching the Endpoint

The Hacker NewsApr 19, 11:08 UTC · Apr 19, 2024Ransomware

57

At least 3 different groups have been leveraging the NSA EternalBlue exploit, what's went wrong?

Security AffairsAug 22, 08:11 UTC · Aug 22, 2017Ransomware

57

Lemon Duck brings cryptocurrency miners back into the spotlight

Cisco TalosOct 13, 14:59 UTC · Oct 13, 2020Ransomware1

57

DarkSide Ransomware Gang: An Overview

Palo Alto Unit 42Jun 6, 12:42 UTC · Jun 6, 2024Ransomware

57

Q3 Malware Trends: Ransomware Extorts Education, Emotet and Crypto Mining Malware Evolve, and Android Malware Persists

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Ransomware

57

3 Ransomware Group Newcomers to Watch in 2024

The Hacker NewsJan 17, 08:39 UTC · Jan 17, 2024Ransomware

57

Evolution of SamSa Malware Suggests New Ransomware Tactics In Play

Palo Alto Unit 42Jan 28, 22:00 UTC · Jan 28, 2022Ransomware

57

From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

Cisco TalosMar 17, 11:58 UTC · Mar 17, 2022Ransomware

57

Exposing HelloXD Ransomware and x4k

Palo Alto Unit 42Jun 5, 20:37 UTC · Jun 5, 2024Ransomware

57