Connecting the Bots - Hancitor fuels Cuba Ransomware OperationsSecurity Affairs·May 7, 09:59 UTC · May 7, 2021Ransomware57
Millions of devices impacted by NAME:WRECK flawsSecurity Affairs·Apr 13, 14:00 UTC · Apr 13, 2021RansomwareCVE-2020-7461CVE-2016-20009CVE-2020-15795+5 CVEs60
Lockbit leak, research opportunities on tools leaked from TAsKaspersky Securelist·Aug 25, 10:00 UTC · Aug 25, 2023Ransomware60
Sextortion profits decline despite higher volume, new techniquesCisco Talos·Apr 11, 17:37 UTC · Apr 11, 2019Ransomware60
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operationsSecurity Affairs·Jul 17, 07:47 UTC · Jul 17, 2025RansomwareCVE-2024-3847560
Anubis Ransomware Encrypts and Wipes Files, Making Recovery Impossible Even After PaymentThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Ransomware57
Researchers Discover "Bootkitty" – First UEFI Bootkit Targeting Linux KernelsThe Hacker News·Dec 2, 16:30 UTC · Dec 2, 2024RansomwareCVE-2023-4023860
Bootkitty is the first UEFI Bootkit designed for Linux systemsSecurity Affairs·Nov 27, 21:01 UTC · Nov 27, 2024Ransomware45
BlueSky Ransomware: Fast Encryption via MultithreadingPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024RansomwareCVE-2020-0796CVE-2021-173260
Emotet Rises Again: Evades Macro Security via OneNote AttachmentsThe Hacker News·Mar 21, 05:20 UTC · Mar 21, 2023Ransomware57
CISA Issues Warning on Active Exploitation of UnRAR Software for Linux SystemsThe Hacker News·Aug 11, 03:56 UTC · Aug 11, 2022Ransomware in the wildCVE-2022-30333CVE-2022-3471360
Threat Source newsletter (June 16, 2022) — Three top takeaways from Cisco LiveCisco Talos·Jun 16, 18:00 UTC · Jun 16, 2022RansomwareCVE-2022-3013660
Sophos linked Entropy ransomware to Dridex malwareSecurity Affairs·Feb 23, 15:57 UTC · Feb 23, 2022Ransomware57
Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted AttacksThe Hacker News·Nov 12, 15:17 UTC · Nov 12, 2021RansomwareCVE-2021-4044460
Threat Source newsletter (Aug. 12, 2021)Cisco Talos·Aug 12, 18:00 UTC · Aug 12, 2021RansomwareCVE-2021-2642460
Adaptive protection against invisible threatsKaspersky Securelist·Dec 14, 12:00 UTC · Dec 14, 2020Ransomware57
New JNEC.a Ransomware delivered through WinRAR exploitSecurity Affairs·Mar 19, 14:57 UTC · Mar 19, 2019RansomwareCVE-2018-2025060
Modified Zyklon and plugins from IndiaCisco Talos·May 23, 13:05 UTC · May 23, 2017RansomwareCVE-2013-3906CVE-2012-185660