De-anonymizing ransomware domains on the dark webCisco Talos·Jun 28, 12:00 UTC · Jun 28, 2022Ransomware57
Angler Exploit Kit Continues to Evade Detection: Over 90,000 Websites CompromisedPalo Alto Unit 42·Nov 1, 10:02 UTC · Nov 1, 2018Ransomware57
Attackers use domain fronting technique to target Myanmar with Cobalt StrikeCisco Talos·Nov 16, 12:00 UTC · Nov 16, 2021Ransomware57
Cryptojacking worm compromised over 2,000 Docker hostsHelp Net Security·Oct 18, 00:00 UTC · Oct 18, 2019Ransomware57
Researcher finds Russia-based ransomware network with foothold in U.S.The Record·Jan 11, 00:00 UTC · Jan 11, 2023Ransomware57
Meet the World’s Biggest ‘Bulletproof’ HosterKrebs on Security·Jul 15, 00:00 UTC · Jul 15, 2019Ransomware57
Police dismantled bulletproof hosting service provider Lolek HostedSecurity Affairs·Aug 12, 17:57 UTC · Aug 12, 2023Ransomware57
Adversary Infrastructure Report 2020: A Defender’s ViewRecorded Future·Jan 2, 00:00 UTC · Jan 2, 2026Ransomware57
Analysis of Cuba ransomware gang activity and toolingKaspersky Securelist·Sep 11, 10:00 UTC · Sep 11, 2023RansomwareCVE-2021-31207CVE-2021-34473CVE-2021-34523+8 CVEs60
Dutch police takes down bulletproof hosting hub linked to 80+ cybercrime casesSecurity Affairs·Nov 18, 06:23 UTC · Nov 18, 2025Ransomware57
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
US Government website was hosting a JavaScript downloader delivering Cerber ransomwareSecurity Affairs·Sep 3, 07:25 UTC · Sep 3, 2017Ransomware57
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE AttackThe Hacker News·Jul 21, 07:34 UTC · Jul 21, 2026Ransomware in the wildCVE-2025-3248CVE-2026-33017CVE-2026-55255160
Authorities Take Down Lolek Bulletproof Hosting ProviderInfosecurity Magazine·Aug 14, 09:45 UTC · Aug 14, 2023Ransomware57
Uncovering Qilin attack methods exposed through multiple casesCisco Talos·Oct 27, 02:00 UTC · Oct 27, 2025Ransomware57
Ukrainian Network FDN3 Launches Massive BruteThe Hacker News·Sep 4, 17:45 UTC · Sep 4, 2025Ransomware57
Cloud hosting firms hit by devastating ransomware attackHelp Net Security·Aug 24, 00:00 UTC · Aug 24, 2023Ransomware57
US internet hosting company appears to facilitate global cybercrime, researchers sayCyberScoop·Aug 1, 13:00 UTC · Aug 1, 2023Ransomware57
Rackspace Hosted Exchange service outage caused by security incidentHelp Net Security·Dec 5, 00:00 UTC · Dec 5, 2022Ransomware57
Cloud Hosting Provider DataResolution.net Battling Christmas Eve Ransomware AttackKrebs on Security·Feb 1, 04:33 UTC · Feb 1, 2019Ransomware57
Over 500 ESXiArgs Ransomware infections in one day in EuropeSecurity Affairs·Feb 16, 18:10 UTC · Feb 16, 2023Ransomware57
Sowing Discord: Reaping the benefits of collaboration app abuseCisco Talos·Apr 7, 12:06 UTC · Apr 7, 2021Ransomware157
Web Hosting Company Pays $1 Million to Ransomware Hackers to Get Files BackThe Hacker News·Jun 20, 13:01 UTC · Jun 20, 2017Ransomware57
Additional Entities Targeted by DarkSide Affiliate, TAG-21; Links to WellMess and Sliver InfrastructureRecorded Future·Jul 15, 00:00 UTC · Jul 15, 2025Ransomware57
Cyberattack on Russian independent media had links to USThe Record·Jul 1, 17:11 UTC · Jul 1, 2025Ransomware57
Dutch Police shut down bulletproof hosting provider Zservers and seized 127 serversSecurity Affairs·Feb 17, 20:55 UTC · Feb 17, 2025Ransomware57
BlueSky Ransomware: Fast Encryption via MultithreadingPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024RansomwareCVE-2020-0796CVE-2021-173260
Swiss Cloud becomes the latest web hosting provider to suffer a ransomware attackThe Record·Dec 7, 00:00 UTC · Dec 7, 2022Ransomware57
Rackspace Hosted Exchange outage was caused by ransomwareHelp Net Security·Dec 6, 00:00 UTC · Dec 6, 2022Ransomware157
Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with BabukCisco Talos·Nov 3, 12:00 UTC · Nov 3, 2021RansomwareCVE-2021-3694260
Velociraptor leveraged in ransomware attacksCisco Talos·Oct 9, 10:00 UTC · Oct 9, 2025RansomwareCVE-2025-6264160
Talos IR ransomware engagements and the significance of timeliness in incident responseCisco Talos·Jul 16, 10:00 UTC · Jul 16, 2025RansomwareCVE-2024-57727160
Analyzing the familiar tools used by the Crypt Ghouls hacktivistsKaspersky Securelist·Oct 18, 10:00 UTC · Oct 18, 2024Ransomware57
Rackspace ransomware attack was executed by using previously unknown security exploitHelp Net Security·Nov 20, 13:31 UTC · Nov 20, 2023RansomwareCVE-2022-41082CVE-2022-4108060