Friday Squid Blogging: Giant Squid ArtSchneier on Security·Nov 12, 22:16 UTC · Nov 12, 2021Ransomware60
Quarterly Report: Incident Response trends from Fall 2020Cisco Talos·Dec 9, 14:32 UTC · Dec 9, 2020RansomwareCVE-2020-0688CVE-2020-116511CVE-2020-11652+1 CVEs60
Ransom Cartel Ransomware: A Possible Connection With REvilPalo Alto Unit 42·Jun 5, 17:50 UTC · Jun 5, 2024Ransomware57
Quarterly Report: Incident Response trends from Spring 2021Cisco Talos·Jun 10, 12:00 UTC · Jun 10, 2021RansomwareCVE-2021-26855CVE-2021-26857CVE-2021-26858+4 CVEs60
Magnitude exploit kitKaspersky Securelist·Jun 24, 10:00 UTC · Jun 24, 2020Ransomware in the wildCVE-2018-8174CVE-2018-8653CVE-2019-1367+3 CVEs60
Uncovering Qilin attack methods exposed through multiple casesCisco Talos·Oct 27, 02:00 UTC · Oct 27, 2025Ransomware57
BlueSky Ransomware: Fast Encryption via MultithreadingPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024RansomwareCVE-2020-0796CVE-2021-173260
Quarterly Report: Incident Response trends in Summer 2020Cisco Talos·Sep 1, 15:00 UTC · Sep 1, 2020RansomwareCVE-2019-1893560
Lifting the veil on DeathStalker, a mercenary triumvirateKaspersky Securelist·Aug 24, 10:00 UTC · Aug 24, 2020Ransomware57
2 distinct campaigns delivered GandCrab ransomware and Ursnif TrojanSecurity Affairs·Jan 26, 08:29 UTC · Jan 26, 2019Ransomware57
GandCrab ransomware and Ursnif virus spreading via MS Word macrosThe Hacker News·Jan 25, 11:29 UTC · Jan 25, 2019Ransomware57
Analyzing the familiar tools used by the Crypt Ghouls hacktivistsKaspersky Securelist·Oct 18, 10:00 UTC · Oct 18, 2024Ransomware57
Iranian linked conglomerate MuddyWater comprised of regionally focused subgroupsCisco Talos·Mar 10, 13:02 UTC · Mar 10, 2022Ransomware57
Ransomware by the numbers: Reassessing the threat’s global impactKaspersky Securelist·Apr 23, 10:19 UTC · Apr 23, 2021Ransomware57
Quarterly Report: Incident Response trends from Winter 2020Cisco Talos·Mar 24, 12:26 UTC · Mar 24, 2021RansomwareCVE-2021-26855CVE-2020-5902CVE-2019-1893560
Adaptive protection against invisible threatsKaspersky Securelist·Dec 14, 12:00 UTC · Dec 14, 2020Ransomware57
TA505 Cybercrime targets system integrator companiesSecurity Affairs·Nov 12, 13:50 UTC · Nov 12, 2019Ransomware57
The GIBON Ransomware appears in the threat landscapeSecurity Affairs·Nov 6, 08:41 UTC · Nov 6, 2017Ransomware57
The author of the original Petya ransomware released the master keySecurity Affairs·Jul 7, 15:32 UTC · Jul 7, 2017Ransomware57
How to restore files encrypted by the Petya ransomwareSecurity Affairs·Jul 7, 15:16 UTC · Jul 7, 2017Ransomware57
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD WorkflowsThe Hacker News·May 26, 11:56 UTC · May 26, 2026Ransomware57
Why a decade-old EnCase driver still works as an EDR killerHelp Net Security·Feb 5, 00:00 UTC · Feb 5, 2026Ransomware60
Novel News on Cuba Ransomware: Greetings From Tropical ScorpiusPalo Alto Unit 42·Jun 5, 20:16 UTC · Jun 5, 2024Ransomware57
Blowing Cobalt Strike Out of the Water With Memory AnalysisPalo Alto Unit 42·Jun 5, 17:24 UTC · Jun 5, 2024Ransomware57
Albabat, Kasseika, Kuiper: New Ransomware Gangs Rise with Rust and GolangThe Hacker News·Jan 30, 07:39 UTC · Jan 30, 2024Ransomware157
Understanding the Phobos affiliate structure and activityCisco Talos·Nov 17, 13:01 UTC · Nov 17, 2023Ransomware57
QBot banker delivered through business correspondenceKaspersky Securelist·Apr 17, 10:00 UTC · Apr 17, 2023Ransomware57
Avos ransomware group expands with new attack arsenalCisco Talos·Jun 21, 11:58 UTC · Jun 21, 2022RansomwareCVE-2021-44228CVE-2021-45046CVE-2021-45105+1 CVEs60
Conti Ransomware Group Diaries, Part II: The OfficeKrebs on Security·Mar 2, 18:57 UTC · Mar 2, 2022Ransomware57
Targeted Ransomware Attacks Middle Eastern Government Organizations for Political PurposesPalo Alto Unit 42·Jan 28, 21:49 UTC · Jan 28, 2022Ransomware57
Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with BabukCisco Talos·Nov 3, 12:00 UTC · Nov 3, 2021RansomwareCVE-2021-3694260
SQUIRRELWAFFLE Leverages malspam to deliver Qakbot, Cobalt StrikeCisco Talos·Oct 26, 12:00 UTC · Oct 26, 2021Ransomware45
Vice Society leverages PrintNightmare in ransomware attacksCisco Talos·Aug 12, 22:33 UTC · Aug 12, 2021RansomwareCVE-2021-1675CVE-2021-3452760