Blowing Cobalt Strike Out of the Water With Memory AnalysisPalo Alto Unit 42·Jun 5, 17:24 UTC · Jun 5, 2024Ransomware57
Lemon Duck brings cryptocurrency miners back into the spotlightCisco Talos·Oct 13, 14:59 UTC · Oct 13, 2020Ransomware57
New BYOVD loader behind DeadLock ransomware attackCisco Talos·Dec 9, 11:00 UTC · Dec 9, 2025RansomwareCVE-2024-5132460
New MortalKombat ransomware and Laplas Clipper malware threats deployed in financially motivated campaignCisco Talos·Feb 14, 13:00 UTC · Feb 14, 2023Ransomware57
Microsoft Exchange vulnerabilities exploited once again for ransomware, this time with BabukCisco Talos·Nov 3, 12:00 UTC · Nov 3, 2021RansomwareCVE-2021-3694260
FIN7, FIN8, and Others Use Ragnar Loader for Persistent Access and Ransomware OperationsThe Hacker News·Mar 8, 11:50 UTC · Mar 8, 2025Ransomware60
China-linked APT Bronze Starlight deploys ransomware as a smokescreenSecurity Affairs·Jun 26, 13:40 UTC · Jun 26, 2022Ransomware57
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & MoreThe Hacker News·Mar 19, 14:25 UTC · Mar 19, 2026Ransomware in the wildCVE-2024-55591CVE-2025-71257CVE-2025-71258+4 CVEs60
Dark market overview and predictions for 2025Kaspersky Securelist·Dec 16, 09:27 UTC · Dec 16, 2024Ransomware60
Experts link Raspberry Robin to Evil Corp cybercrime gangSecurity Affairs·Sep 2, 12:56 UTC · Sep 2, 2022Ransomware57
The intricate relationships between the FIN7 group and members of the Conti gangSecurity Affairs·Apr 18, 09:11 UTC · Apr 18, 2023Ransomware57
2022 Year in Review: Ransomware & Commodity Loaders Livestream ReplayCisco Talos·Feb 8, 19:45 UTC · Feb 8, 2023Ransomware57
SamSam - The Evolution Continues Netting Over $325,000 in 4 WeeksCisco Talos·Jan 22, 17:29 UTC · Jan 22, 2018Ransomware60
For the first time, a RomCom payload has been observed being distributed via SocGholish.Security Affairs·Nov 26, 20:16 UTC · Nov 26, 2025Ransomware57
Google warns of cybercriminals targeting Salesforce app to steal data, extort companiesThe Record·Jun 4, 15:10 UTC · Jun 4, 2025Ransomware57
China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike BeaconsThe Hacker News·Jan 22, 08:28 UTC · Jan 22, 2025Ransomware57
Key Group uses leaked builders of ransomware and wipersKaspersky Securelist·Oct 1, 10:00 UTC · Oct 1, 2024Ransomware57
Dark web threats and dark market predictions for 2024Kaspersky Securelist·Jan 17, 10:00 UTC · Jan 17, 2024Ransomware57
Attackers use domain fronting technique to target Myanmar with Cobalt StrikeCisco Talos·Nov 16, 12:00 UTC · Nov 16, 2021Ransomware57
Threat Source newsletter for April 16, 2020Cisco Talos·Apr 16, 04:00 UTC · Apr 16, 2020Ransomware in the wild60
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More StoriesThe Hacker News·Jul 30, 15:25 UTC · Jul 30, 2026RansomwareCVE-2026-33017CVE-2026-21858CVE-2025-68613+5 CVEs60
Kraken Cryptor Ransomware: A Growing Threat Among CybercriminalsRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware57
⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & MoreThe Hacker News·Oct 6, 11:28 UTC · Oct 6, 2025RansomwareCVE-2025-20362CVE-2025-20333CVE-2025-20363+15 CVEs60
2024 Malicious Infrastructure Insights: Key Trends and ThreatsRecorded Future·Aug 20, 00:00 UTC · Aug 20, 2025Ransomware57
Cybercriminals camouflaging threats as AI tool installersCisco Talos·May 29, 10:00 UTC · May 29, 2025Ransomware57
Analyzing the familiar tools used by the Crypt Ghouls hacktivistsKaspersky Securelist·Oct 18, 10:00 UTC · Oct 18, 2024Ransomware57
IcedID Malware Shifts Focus from Banking Fraud to Ransomware DeliveryThe Hacker News·Mar 28, 12:08 UTC · Mar 28, 2023Ransomware57
Ransomware and Commodity Loader Topic Summary Report: Cisco Talos Year in Review 2022Cisco Talos·Feb 6, 13:00 UTC · Feb 6, 2023Ransomware57
A taste of the latest release of QakBot...........................Security Affairs·May 6, 09:22 UTC · May 6, 2021Ransomware57
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno InThe Hacker News·Mar 17, 14:34 UTC · Mar 17, 2026Ransomware57
Uncovering Qilin attack methods exposed through multiple casesCisco Talos·Oct 27, 02:00 UTC · Oct 27, 2025Ransomware57
⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-theThe Hacker News·Aug 27, 05:11 UTC · Aug 27, 2025Ransomware in the wildCVE-2018-0171CVE-2025-43300CVE-2025-7353+5 CVEs60
Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOSThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2025Ransomware57