Exploring vulnerable Windows driversCisco Talos·Dec 19, 11:04 UTC · Dec 19, 2024RansomwareCVE-2022-369960
New Ransomware-as-a-Service Tool ‘Thanos’ Shows Connections to ‘Hakbit’Recorded Future·Jun 29, 00:00 UTC · Jun 29, 2026Ransomware57
Ransom Cartel Ransomware: A Possible Connection With REvilPalo Alto Unit 42·Jun 5, 17:50 UTC · Jun 5, 2024Ransomware57
Emotet spam uses unconventional IP Address formats to evade detectionSecurity Affairs·Jan 24, 12:07 UTC · Jan 24, 2022Ransomware57
Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channelCisco Talos·Jul 23, 10:00 UTC · Jul 23, 2026Ransomware57
Use of DNS Tunneling for C&C CommunicationsKaspersky Securelist·Apr 28, 09:59 UTC · Apr 28, 2017Ransomware57
Updated PClock Ransomware Still Comes Up ShortPalo Alto Unit 42·Jan 28, 22:09 UTC · Jan 28, 2022Ransomware57
JadePuffer returns with ransomware built to target AI models and infrastructureHelp Net Security·Jul 21, 00:00 UTC · Jul 21, 2026RansomwareCVE-2025-3248160
Unwrapping the emerging Interlock ransomware attackCisco Talos·Nov 7, 11:00 UTC · Nov 7, 2024Ransomware57
Nokoyawa ransomware attacks with Windows zeroKaspersky Securelist·Apr 11, 17:36 UTC · Apr 11, 2023RansomwareCVE-2023-28252CVE-2022-24521CVE-2022-37969+1 CVEs60
Lockbit leak, research opportunities on tools leaked from TAsKaspersky Securelist·Aug 25, 10:00 UTC · Aug 25, 2023Ransomware60
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News·Jul 21, 07:34 UTC · Jul 21, 2026Ransomware in the wildCVE-2025-3248CVE-2026-33017CVE-2026-55255160
ExPetr/Petya/NotPetya is a Wiper, Not RansomwareKaspersky Securelist·Jun 28, 18:51 UTC · Jun 28, 2017Ransomware57
The Shade Encryptor: a Double ThreatKaspersky Securelist·Sep 14, 12:54 UTC · Sep 14, 2015Ransomware57
New BYOVD loader behind DeadLock ransomware attackCisco Talos·Dec 9, 11:00 UTC · Dec 9, 2025RansomwareCVE-2024-5132460
SamSa Ransomware Attacks: A Year in ReviewPalo Alto Unit 42·Jan 28, 20:37 UTC · Jan 28, 2022Ransomware57
CryPy: ransomware behind Israeli linesKaspersky Securelist·Oct 13, 09:26 UTC · Oct 13, 2016Ransomware57
2 distinct campaigns delivered GandCrab ransomware and Ursnif TrojanSecurity Affairs·Jan 26, 08:29 UTC · Jan 26, 2019Ransomware57
GandCrab ransomware and Ursnif virus spreading via MS Word macrosThe Hacker News·Jan 25, 11:29 UTC · Jan 25, 2019Ransomware57
Kaspersky discovers new Ymir ransomware used together with RustyStealerKaspersky Securelist·Nov 11, 10:00 UTC · Nov 11, 2024Ransomware157
Adversaries are leveraging remote access tools now more than ever — here’s how to stop themCisco Talos·Apr 2, 12:00 UTC · Apr 2, 2024Ransomware57
TeamXRat: Brazilian cybercrime meets ransomwareKaspersky Securelist·Sep 29, 16:42 UTC · Sep 29, 2016Ransomware57
Prometheus Ransomware Gang: A Group of REvil?Palo Alto Unit 42·Jun 6, 12:34 UTC · Jun 6, 2024Ransomware57
New eCh0raix Ransomware Variant Targets QNAP and Synology NetworkPalo Alto Unit 42·Jun 6, 12:17 UTC · Jun 6, 2024RansomwareCVE-2021-28799160
AmCache artifact: forensic value and a tool for data extractionKaspersky Securelist·Oct 1, 10:00 UTC · Oct 1, 2025Ransomware57
Jaff Ransomware: Player 2 Has Entered The GameCisco Talos·May 12, 13:58 UTC · May 12, 2017Ransomware57
SQUIRRELWAFFLE Leverages malspam to deliver Qakbot, Cobalt StrikeCisco Talos·Oct 26, 12:00 UTC · Oct 26, 2021Ransomware45
Victims of Pylocky ransomware can decrypt their files for freeSecurity Affairs·Jan 11, 14:59 UTC · Jan 11, 2019Ransomware57
Customizable Elpaco ransomware abuses the Everything libraryKaspersky Securelist·Nov 26, 10:00 UTC · Nov 26, 2024RansomwareCVE-2020-147260
A taste of the latest release of QakBot...........................Security Affairs·May 6, 09:22 UTC · May 6, 2021Ransomware57
Mespinoza Ransomware Gang Calls Victims “Partners,” Attacks with Gasket, "MagicSocks" ToolsPalo Alto Unit 42·Jun 6, 12:21 UTC · Jun 6, 2024Ransomware57
Scality ARTESCA 2.0 strenghtens ransomware protectionHelp Net Security·May 16, 00:00 UTC · May 16, 2023Ransomware60
PyLocky Ransomware Decryption Tool Released — Unlock Files For FreeThe Hacker News·Jan 11, 07:11 UTC · Jan 11, 2019Ransomware57