Exploring vulnerable Windows driversCisco Talos·Dec 19, 11:04 UTC · Dec 19, 2024RansomwareCVE-2022-369960
New Ransomware-as-a-Service Tool ‘Thanos’ Shows Connections to ‘Hakbit’Recorded Future·Jun 29, 00:00 UTC · Jun 29, 2026Ransomware57
Ransom Cartel Ransomware: A Possible Connection With REvilPalo Alto Unit 42·Jun 5, 17:50 UTC · Jun 5, 2024Ransomware57
Emotet spam uses unconventional IP Address formats to evade detectionSecurity Affairs·Jan 24, 12:07 UTC · Jan 24, 2022Ransomware57
Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channelCisco Talos·Jul 23, 10:00 UTC · Jul 23, 2026Ransomware57
Use of DNS Tunneling for C&C CommunicationsKaspersky Securelist·Apr 28, 09:59 UTC · Apr 28, 2017Ransomware57
Updated PClock Ransomware Still Comes Up ShortPalo Alto Unit 42·Jan 28, 22:09 UTC · Jan 28, 2022Ransomware57
JadePuffer returns with ransomware built to target AI models and infrastructureHelp Net Security·Jul 21, 00:00 UTC · Jul 21, 2026RansomwareCVE-2025-3248160
Unwrapping the emerging Interlock ransomware attackCisco Talos·Nov 7, 11:00 UTC · Nov 7, 2024Ransomware57
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News·Jul 21, 07:34 UTC · Jul 21, 2026Ransomware in the wildCVE-2025-3248CVE-2026-33017CVE-2026-55255160
ExPetr/Petya/NotPetya is a Wiper, Not RansomwareKaspersky Securelist·Jun 28, 18:51 UTC · Jun 28, 2017Ransomware57
The Shade Encryptor: a Double ThreatKaspersky Securelist·Sep 14, 12:54 UTC · Sep 14, 2015Ransomware57
SamSa Ransomware Attacks: A Year in ReviewPalo Alto Unit 42·Jan 28, 20:37 UTC · Jan 28, 2022Ransomware57
CryPy: ransomware behind Israeli linesKaspersky Securelist·Oct 13, 09:26 UTC · Oct 13, 2016Ransomware57
2 distinct campaigns delivered GandCrab ransomware and Ursnif TrojanSecurity Affairs·Jan 26, 08:29 UTC · Jan 26, 2019Ransomware57
GandCrab ransomware and Ursnif virus spreading via MS Word macrosThe Hacker News·Jan 25, 11:29 UTC · Jan 25, 2019Ransomware57
Kaspersky discovers new Ymir ransomware used together with RustyStealerKaspersky Securelist·Nov 11, 10:00 UTC · Nov 11, 2024Ransomware157
Adversaries are leveraging remote access tools now more than ever — here’s how to stop themCisco Talos·Apr 2, 12:00 UTC · Apr 2, 2024Ransomware57
TeamXRat: Brazilian cybercrime meets ransomwareKaspersky Securelist·Sep 29, 16:42 UTC · Sep 29, 2016Ransomware57
Prometheus Ransomware Gang: A Group of REvil?Palo Alto Unit 42·Jun 6, 12:34 UTC · Jun 6, 2024Ransomware57
New eCh0raix Ransomware Variant Targets QNAP and Synology NetworkPalo Alto Unit 42·Jun 6, 12:17 UTC · Jun 6, 2024RansomwareCVE-2021-28799160
AmCache artifact: forensic value and a tool for data extractionKaspersky Securelist·Oct 1, 10:00 UTC · Oct 1, 2025Ransomware57
Jaff Ransomware: Player 2 Has Entered The GameCisco Talos·May 12, 13:58 UTC · May 12, 2017Ransomware57
Victims of Pylocky ransomware can decrypt their files for freeSecurity Affairs·Jan 11, 14:59 UTC · Jan 11, 2019Ransomware57
Customizable Elpaco ransomware abuses the Everything libraryKaspersky Securelist·Nov 26, 10:00 UTC · Nov 26, 2024RansomwareCVE-2020-147260
A taste of the latest release of QakBot...........................Security Affairs·May 6, 09:22 UTC · May 6, 2021Ransomware57
Mespinoza Ransomware Gang Calls Victims “Partners,” Attacks with Gasket, "MagicSocks" ToolsPalo Alto Unit 42·Jun 6, 12:21 UTC · Jun 6, 2024Ransomware57
PyLocky Ransomware Decryption Tool Released — Unlock Files For FreeThe Hacker News·Jan 11, 07:11 UTC · Jan 11, 2019Ransomware57
Novel News on Cuba Ransomware: Greetings From Tropical ScorpiusPalo Alto Unit 42·Jun 5, 20:16 UTC · Jun 5, 2024Ransomware57
TeslaCrypt 2.0 disguised as CryptoWallKaspersky Securelist·Jul 14, 10:59 UTC · Jul 14, 2015Ransomware57
Iranian APT MuddyWater targets Turkish users via malicious PDFs, executablesCisco Talos·Jan 31, 13:00 UTC · Jan 31, 2022Ransomware57
Magniber ransomware: exclusively for South KoreansMalwarebytes Labs·Jan 13, 08:15 UTC · Jan 13, 2026Ransomware57
New Bert Ransomware Group Strikes Globally with Multiple VariantsInfosecurity Magazine·Jul 8, 09:00 UTC · Jul 8, 2025Ransomware57
Cybercriminals camouflaging threats as AI tool installersCisco Talos·May 29, 10:00 UTC · May 29, 2025Ransomware57
The link between Ransom Cartel and REvil ransomware gangsSecurity Affairs·Oct 19, 13:07 UTC · Oct 19, 2022Ransomware57