New BYOVD loader behind DeadLock ransomware attackCisco Talos·Dec 9, 11:00 UTC · Dec 9, 2025RansomwareCVE-2024-5132460
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026The Hacker News·Mar 21, 07:03 UTC · Mar 21, 2026Ransomware in the wildCVE-2026-2013160
North Korean Hackers Spotted Using New MultiThe Hacker News·Jul 23, 09:18 UTC · Jul 23, 2020Ransomware57
TA505 Cybercrime targets system integrator companiesSecurity Affairs·Nov 12, 13:50 UTC · Nov 12, 2019Ransomware57
Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle EastThe Hacker News·Sep 20, 12:44 UTC · Sep 20, 2024RansomwareCVE-2019-060460
A Multi-Method Approach to Identifying Rogue Cobalt Strike ServersRecorded Future·Aug 21, 00:00 UTC · Aug 21, 2025Ransomware57
Talos IR trends Q4 2024: Web shell usage and exploitation of publicCisco Talos·Jan 30, 11:00 UTC · Jan 30, 2025Ransomware57
Friday Squid Blogging: Brittle Star Catches a SquidSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Ransomware57
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
Lemon Duck brings cryptocurrency miners back into the spotlightCisco Talos·Oct 13, 14:59 UTC · Oct 13, 2020Ransomware57
Modified Zyklon and plugins from IndiaCisco Talos·May 23, 13:05 UTC · May 23, 2017RansomwareCVE-2013-3906CVE-2012-185660
De-anonymizing ransomware domains on the dark webCisco Talos·Jun 28, 12:00 UTC · Jun 28, 2022Ransomware57
Threat Assessment: Black Basta RansomwarePalo Alto Unit 42·Jun 5, 17:55 UTC · Jun 5, 2024Ransomware60
Player 3 Has Entered the Game: Say Hello to 'WannaCry'Cisco Talos·May 12, 22:09 UTC · May 12, 2017Ransomware57
Threat Assessment: BlackByte RansomwarePalo Alto Unit 42·Jun 5, 22:40 UTC · Jun 5, 2024RansomwareCVE-2021-34473CVE-2021-34523CVE-2021-31207160
Head Mare hacktivists: attacks on companies in Russia and BelarusKaspersky Securelist·Sep 2, 10:00 UTC · Sep 2, 2024RansomwareCVE-2023-3883160
North Korean Hackers Target Critical Infrastructure for Military GainInfosecurity Magazine·Jul 26, 11:02 UTC · Jul 26, 2024Ransomware60
Attackers use domain fronting technique to target Myanmar with Cobalt StrikeCisco Talos·Nov 16, 12:00 UTC · Nov 16, 2021Ransomware57
Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangsCisco Talos·Apr 23, 10:00 UTC · Apr 23, 2025Ransomware60
Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR ToolsThe Hacker News·Apr 6, 10:07 UTC · Apr 6, 2026Ransomware57
Andariel deploys DTrack and Maui ransomwareKaspersky Securelist·Aug 9, 14:25 UTC · Aug 9, 2022RansomwareCVE-2017-1027160
Kaspersky Q4 2021 DDoS attack reportKaspersky Securelist·Feb 10, 10:00 UTC · Feb 10, 2022RansomwareCVE-2017-6079CVE-2021-22205CVE-2021-3626060
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC ZeroRecorded Future·Jun 3, 00:00 UTC · Jun 3, 2026Ransomware in the wildCVE-2017-7921CVE-2026-27483CVE-2026-27944+10 CVEs260
Kaspersky discovers new Ymir ransomware used together with RustyStealerKaspersky Securelist·Nov 11, 10:00 UTC · Nov 11, 2024Ransomware157
ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & MoreThe Hacker News·Oct 23, 14:22 UTC · Oct 23, 2025Ransomware57
OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain IncidentThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026RansomwareCVE-2026-3363460
Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency MinerThe Hacker News·Jul 21, 06:31 UTC · Jul 21, 2025RansomwareCVE-2021-41773CVE-2024-36401CVE-2023-22527+5 CVEs60
Cisco Talos shares insights related to recent cyber attack on CiscoCisco Talos·Aug 10, 19:30 UTC · Aug 10, 2022Ransomware60
⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & MoreThe Hacker News·Aug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948CVE-2025-54987CVE-2025-8088+30 CVEs60
Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channelCisco Talos·Jul 23, 10:00 UTC · Jul 23, 2026Ransomware57