Quarterly Report: Incident Response Trends in Q1 2023Cisco Talos·Apr 26, 12:00 UTC · Apr 26, 2023Ransomware57
Talos IR trends Q4 2024: Web shell usage and exploitation of publicCisco Talos·Jan 30, 11:00 UTC · Jan 30, 2025Ransomware57
FBI operation removed web shells from hacked Exchange servers across the USThe Record·Jan 26, 00:00 UTC · Jan 26, 2023Ransomware57
Your Organization’s Network Access Is King: Here’s What to Do About ItRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Ransomware57
Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell AttacksThe Hacker News·Jan 22, 03:40 UTC · Jan 22, 2024Ransomware in the wildCVE-2023-4660460
Oil and gas giant Shell confirms it was impacted by Clop ransomware attacksThe Record·Jun 15, 13:36 UTC · Jun 15, 2023Ransomware57
A hacking group is hijacking Microsoft Exchange web shellsThe Record·Nov 17, 00:00 UTC · Nov 17, 2022Ransomware57
200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypassSecurity Affairs·Oct 15, 14:22 UTC · Oct 15, 2025RansomwareCVE-2022-34302CVE-2023-48733CVE-2024-734460
Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse ShellThe Hacker News·Sep 21, 11:01 UTC · Sep 21, 2025RansomwareCVE-2022-3019060
Threat Roundup for September 17 to September 24Cisco Talos·Sep 24, 17:07 UTC · Sep 24, 2021Ransomware57
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched SystemsThe Hacker News·Jul 28, 15:57 UTC · Jul 28, 2025Ransomware in the wildCVE-2025-49706CVE-2025-4970460
Web Shells and Digital Extortion Drive Triple-Digit Growth in CyberInfosecurity Magazine·Aug 5, 08:37 UTC · Aug 5, 2021Ransomware57
Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-theThe Hacker News·Oct 30, 09:41 UTC · Oct 30, 2025RansomwareCVE-2025-808860
Head Mare hacktivists: attacks on companies in Russia and BelarusKaspersky Securelist·Sep 2, 10:00 UTC · Sep 2, 2024RansomwareCVE-2023-3883160
Iranian Agonizing Serpens APT is targeting Israeli entities with destructive cyber attacksSecurity Affairs·Nov 7, 19:00 UTC · Nov 7, 2023Ransomware57
Threat Roundup for September 16 to September 23Cisco Talos·Sep 23, 22:06 UTC · Sep 23, 2022Ransomware57
Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with BabukCisco Talos·Nov 3, 12:00 UTC · Nov 3, 2021RansomwareCVE-2021-3694260
Executive Overview of Russian Aggression Against UkraineRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Ransomware57
Chinese Hackers Exploit Cityworks Flaw to Target US Local GovernmentsInfosecurity Magazine·May 26, 12:00 UTC · May 26, 2025Ransomware in the wildCVE-2025-0994160
Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote AccessThe Hacker News·May 19, 14:38 UTC · May 19, 2025Ransomware57
Key Group uses leaked builders of ransomware and wipersKaspersky Securelist·Oct 1, 10:00 UTC · Oct 1, 2024Ransomware57
Trigona Ransomware targets Microsoft SQL serversSecurity Affairs·Apr 20, 07:03 UTC · Apr 20, 2023Ransomware57
An Early Interview With The Dark Overlord: The Hacking Group That Forever Changed Cyber ExtortionThe Record·Nov 17, 01:18 UTC · Nov 17, 2022Ransomware57
News URSNIF variant doesn't support banking featuresSecurity Affairs·Oct 21, 07:50 UTC · Oct 21, 2022Ransomware57
Threat Roundup for February 18 to February 25Cisco Talos·Feb 24, 11:00 UTC · Feb 24, 2022Ransomware157