Phorpiex Botnet Delivers LockBit Ransomware with Automated TacticsInfosecurity Magazine·Apr 29, 16:00 UTC · Apr 29, 2025Ransomware57
A deep dive into Phobos ransomware, recently deployed by 8Base groupCisco Talos·Nov 17, 13:01 UTC · Nov 17, 2023Ransomware57
Customizable Elpaco ransomware abuses the Everything libraryKaspersky Securelist·Nov 26, 10:00 UTC · Nov 26, 2024RansomwareCVE-2020-147260
RTM Locker Ransomware Targets Linux ArchitectureInfosecurity Magazine·Apr 27, 17:00 UTC · Apr 27, 2023Ransomware57
Kaspersky discovers new Ymir ransomware used together with RustyStealerKaspersky Securelist·Nov 11, 10:00 UTC · Nov 11, 2024Ransomware157
BlackByte affiliates use new encryptor and new TTPsHelp Net Security·Aug 28, 00:00 UTC · Aug 28, 2024RansomwareCVE-2024-3708560
Sodinokibi Ransomware Operators hit electrical energy company Light S.A.Security Affairs·Jul 3, 05:59 UTC · Jul 3, 2020RansomwareCVE-2018-845360
AmCache artifact: forensic value and a tool for data extractionKaspersky Securelist·Oct 1, 10:00 UTC · Oct 1, 2025Ransomware57
Prometheus Ransomware Gang: A Group of REvil?Palo Alto Unit 42·Jun 6, 12:34 UTC · Jun 6, 2024Ransomware57
Researchers Unearth Links Between SunCrypt and QNAPCrypt RansomwareThe Hacker News·Mar 2, 15:04 UTC · Mar 2, 2021Ransomware57
Some machines can't be infected by WannaCry because they have been already infected by AdylkuzzSecurity Affairs·Dec 17, 16:22 UTC · Dec 17, 2017Ransomware57
LV ransomware operators repurposed a REvil binary to launch a new RaaSSecurity Affairs·Jun 23, 19:09 UTC · Jun 23, 2021Ransomware57
Leaked LockBit 3.0 ransomware builder used by multiple actorsSecurity Affairs·Aug 27, 20:38 UTC · Aug 27, 2023Ransomware57
New Ransomware Group Phones Execs to Extort PaymentInfosecurity Magazine·Jul 4, 10:15 UTC · Jul 4, 2024Ransomware57
RAMP Uncovered: Anatomy of Russia’s Ransomware MarketplaceSecurity Affairs·Apr 23, 10:17 UTC · Apr 23, 2026Ransomware57
ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & MoreThe Hacker News·Oct 23, 14:22 UTC · Oct 23, 2025Ransomware57
Talos IR ransomware engagements and the significance of timeliness in incident responseCisco Talos·Jul 16, 10:00 UTC · Jul 16, 2025RansomwareCVE-2024-57727160
New Code-injecting SOREBRECT Fileless Ransomware detected in the wildSecurity Affairs·Jun 16, 13:29 UTC · Jun 16, 2017Ransomware57
Gmail will stop allowing JavaScript (.js) file attachments starting February 13, 2017Security Affairs·Jan 26, 23:06 UTC · Jan 26, 2017Ransomware57
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News·Jul 21, 07:34 UTC · Jul 21, 2026Ransomware in the wildCVE-2025-3248CVE-2026-33017CVE-2026-55255160
New Virobot malware combines ransomware and botnet capabilitiesSecurity Affairs·Sep 23, 08:43 UTC · Sep 23, 2018Ransomware57
Dridex banking Trojan and the FriedEx ransomware were developed by the same groupSecurity Affairs·Jan 29, 21:20 UTC · Jan 29, 2018Ransomware57
At least 3 different groups have been leveraging the NSA EternalBlue exploit, what's went wrong?Security Affairs·Aug 22, 08:11 UTC · Aug 22, 2017Ransomware57
Talos IR trends Q4 2024: Web shell usage and exploitation of publicCisco Talos·Jan 30, 11:00 UTC · Jan 30, 2025Ransomware57
Vice Society Hackers Are Behind Several Ransomware Attacks Against Education SectorThe Hacker News·Oct 26, 13:13 UTC · Oct 26, 2022RansomwareCVE-2022-2452160
New P2Pinfect version delivers miners and ransomware on Redis serversSecurity Affairs·Jun 27, 05:40 UTC · Jun 27, 2024RansomwareCVE-2022-054360
Unwrapping the emerging Interlock ransomware attackCisco Talos·Nov 7, 11:00 UTC · Nov 7, 2024Ransomware57
Operation Phobos Aetor: Police dismantled 8Base ransomware gangSecurity Affairs·Feb 11, 08:46 UTC · Feb 11, 2025Ransomware57
8Base ransomware operators use a variant of Phobos ransomwareSecurity Affairs·Nov 19, 09:13 UTC · Nov 19, 2023Ransomware57
Dtrack expands its operations to Europe and Latin AmericaKaspersky Securelist·Nov 15, 10:00 UTC · Nov 15, 2022Ransomware57