AuKill tool uses BYOVD attack to disable EDR softwareSecurity Affairs·Apr 24, 21:42 UTC · Apr 24, 2023Ransomware57
Analyzing the familiar tools used by the Crypt Ghouls hacktivistsKaspersky Securelist·Oct 18, 10:00 UTC · Oct 18, 2024Ransomware57
Talos IR trends Q4 2024: Web shell usage and exploitation of publicCisco Talos·Jan 30, 11:00 UTC · Jan 30, 2025Ransomware57
FBI and CISA warn of attacks by Rhysida ransomware gangSecurity Affairs·Nov 16, 06:25 UTC · Nov 16, 2023RansomwareCVE-2020-147260
China-Linked Espionage Tools Used in Recent Ransomware AttackInfosecurity Magazine·Feb 14, 10:00 UTC · Feb 14, 2025Ransomware57
Talos IR ransomware engagements and the significance of timeliness in incident responseCisco Talos·Jul 16, 10:00 UTC · Jul 16, 2025RansomwareCVE-2024-57727160
Prevent attackers from using legitimate tools against youHelp Net Security·Apr 23, 13:48 UTC · Apr 23, 2026Ransomware57
Hackers exploiting bug in popular Trimble Cityworks tool used by local gov’tsThe Record·Feb 7, 22:18 UTC · Feb 7, 2025RansomwareCVE-2025-099460
Google says Iranian group using tool to download Gmail, Yahoo!, Outlook inboxesThe Record·Jan 11, 00:00 UTC · Jan 11, 2023Ransomware57
Google Uncovers Tool Used by Iranian Hackers to Steal Data from Email AccountsThe Hacker News·Aug 23, 14:50 UTC · Aug 23, 2022Ransomware57
Exmatter exfiltration tool used to implement new extortion tacticsSecurity Affairs·Sep 26, 06:22 UTC · Sep 26, 2022Ransomware57
Adversary Infrastructure Report 2020: A Defender’s ViewRecorded Future·Jan 2, 00:00 UTC · Jan 2, 2026Ransomware57
Researchers link tools used in NotPetya and Ukraine grid hacksCyberScoop·Oct 11, 18:57 UTC · Oct 11, 2018Ransomware in the wild60
How ransomware tactics are shifting, and what it means for your businessHelp Net Security·Apr 23, 13:31 UTC · Apr 23, 2026Ransomware60
New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD AttackThe Hacker News·Jan 24, 08:57 UTC · Jan 24, 2026RansomwareCVE-2019-1158060
Fast-moving Storm-1175 uses new exploits to breach networks and drop MedusaSecurity Affairs·Apr 7, 13:21 UTC · Apr 7, 2026Ransomware in the wildCVE-2026-1731CVE-2023-21529CVE-2023-27351+13 CVEs60
Experts warn of MOVEit Transfer tool exploitation using zeroThe Record·Jun 1, 17:35 UTC · Jun 1, 2023Ransomware60
Threat Source newsletter for Oct. 8, 2020Cisco Talos·Oct 8, 18:00 UTC · Oct 8, 2020Ransomware in the wildCVE-2020-1472CVE-2020-3421CVE-2020-348060
Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD AttackThe Hacker News·Apr 28, 03:18 UTC · Apr 28, 2023Ransomware57
Incident Response Analyst Report of 2019Kaspersky Securelist·Aug 6, 10:00 UTC · Aug 6, 2020Ransomware57
From BlackMatter to BlackCat: Analyzing two attacks from one affiliateCisco Talos·Mar 17, 11:58 UTC · Mar 17, 2022Ransomware57
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
Inexperienced actors developed the FunkSec ransomware using AI toolsSecurity Affairs·Jan 13, 20:54 UTC · Jan 13, 2025Ransomware57
Vice Society is using custom PowerShell tool for data exfiltrationSecurity Affairs·Apr 17, 11:18 UTC · Apr 17, 2023Ransomware57
Foiling RaaS attacks via active threat huntingHelp Net Security·Jan 16, 10:28 UTC · Jan 16, 2023Ransomware60
From Pegasus to Pall Mall: Managing Risks of Offensive Cyber CapabilitiesRecorded Future·Jun 4, 00:00 UTC · Jun 4, 2026Ransomware60
Ransomware: Locky, TeslaCrypt, Other Malware Families Use New Tool To Evade DetectionPalo Alto Unit 42·Jan 28, 22:00 UTC · Jan 28, 2022Ransomware57
Head Mare hacktivists: attacks on companies in Russia and BelarusKaspersky Securelist·Sep 2, 10:00 UTC · Sep 2, 2024RansomwareCVE-2023-3883160
The Gentlemen RaaS: rapid growth and a new ransomware variantKaspersky Securelist·Jun 30, 10:06 UTC · Jun 30, 2026Ransomware160
Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangsCisco Talos·Apr 23, 10:00 UTC · Apr 23, 2025Ransomware60
Trigona ransomware adopts custom tool to steal data and evade detectionSecurity Affairs·Apr 26, 09:37 UTC · Apr 26, 2026Ransomware57
AmCache artifact: forensic value and a tool for data extractionKaspersky Securelist·Oct 1, 10:00 UTC · Oct 1, 2025Ransomware57
Everyday tools, extraordinary crimes: the ransomware exfiltration playbookCisco Talos·Mar 19, 10:00 UTC · Mar 19, 2026Ransomware57
Dissecting the malicious arsenal of the Makop ransomware gangSecurity Affairs·Mar 14, 07:39 UTC · Mar 14, 2023Ransomware57
IT threat evolution in Q3 2015Kaspersky Securelist·Nov 2, 10:31 UTC · Nov 2, 2015RansomwareCVE-2015-511960