FIN7 cybercrime cartel tied to Black Basta ransomware operation: reportThe Record·Dec 22, 00:00 UTC · Dec 22, 2022RansomwareCVE-2022-30190CVE-2020-1472CVE-2021-42287+2 CVEs60
Fin7 weaponization of DDE is just their latest slick move, say researchersCyberScoop·Oct 16, 20:38 UTC · Oct 16, 2017Exploit / PoC in the wild60
Notorious hacking group FIN7 adds ransomware to its repertoireCyberScoop·Apr 4, 19:03 UTC · Apr 4, 2022Ransomware in the wild60
Experts link the Black Basta ransomware operation to FIN7 cybercrime gangSecurity Affairs·Nov 3, 12:34 UTC · Nov 3, 2022RansomwareCVE-2022-3019060
FIN7 'technical guru' sentenced to 10 years in prisonCyberScoop·Apr 16, 18:33 UTC · Apr 16, 2021Policy & legal in the wild60
Notorious FIN7 crooks have new malicious code up their sleevesCyberScoop·Oct 10, 22:49 UTC · Oct 10, 2019Exploit / PoC in the wild60
FIN7 recruiter Andrii Kolpakov pleads guilty to role in global hacking schemeCyberScoop·Nov 17, 15:39 UTC · Nov 17, 2020Exploit / PoC in the wild60
Federal officials have arrested another accused FIN7 hackerCyberScoop·May 26, 19:57 UTC · May 26, 2020Policy & legal in the wild60
FIN7's IT admin pleads guilty for role in billionCyberScoop·Sep 12, 13:25 UTC · Sep 12, 2019Data breach in the wild60
Alleged FIN7 hacking director Andrii Kolpakov set to be extradited to the U.S.CyberScoop·May 9, 15:41 UTC · May 9, 2019Exploit / PoC in the wild60
FIN7 Cybercrime Syndicate Emerges as a Major Player in Ransomware LandscapeThe Hacker News·Dec 26, 11:59 UTC · Dec 26, 2022RansomwareCVE-2020-0688CVE-2021-4232160
Malware from notorious FIN7 group is being delivered by snail mailCyberScoop·Mar 27, 21:04 UTC · Mar 27, 2020Malware in the wild60
Can software vendors block a notorious criminal group’s attacks? MITRE wants to find outCyberScoop·Feb 20, 23:04 UTC · Feb 20, 2020Exploit / PoC in the wild60
FIN7 returns with new ransomware attacksCyberScoop·May 19, 20:32 UTC · May 19, 2023Ransomware in the wild60
FIN7 hacker sentenced to five yearsCyberScoop·Apr 7, 22:12 UTC · Apr 7, 2022Policy & legal in the wild60
Andrii Kolpakov, who supervised hackers for FIN7, sentenced to 7 years in prisonCyberScoop·Jun 24, 21:26 UTC · Jun 24, 2021Policy & legal in the wild60
Bank heist with FIN7 traits went down while leaders were on the run, research suggestsCyberScoop·Jun 4, 12:55 UTC · Jun 4, 2019Exploit / PoC in the wild60
Alleged FIN7 scammer Denys Iarmak is set to plead guiltyCyberScoop·Nov 16, 17:42 UTC · Nov 16, 2021Phishing & fraud in the wild60
FIN7 scammers posed as SEC officials, sick restaurant customers to hack victimsCyberScoop·Jun 22, 21:00 UTC · Jun 22, 2021Phishing & fraud in the wild60
Cyberthreats to financial institutions 2020: Overview and predictionsKaspersky Securelist·Dec 3, 14:59 UTC · Dec 3, 2019Exploit / PoC60
Financial hacking teams FIN7, Cobalt Group update tactics to haunt banks and retailCyberScoop·Aug 14, 15:18 UTC · Aug 14, 2019Exploit / PoC in the wild60
New FIN7 hacking tools uncovered months after three suspects were arrestedCyberScoop·Mar 20, 18:37 UTC · Mar 20, 2019Policy & legal in the wild160
Pacific Northwest burger chain hit by FIN7CyberScoop·Oct 4, 13:22 UTC · Oct 4, 2018Exploit / PoC in the wild60
Notorious Cyber Gang FIN7 Returns With Cl0p Ransomware in New Wave of AttacksThe Hacker News·May 20, 13:45 UTC · May 20, 2023RansomwareCVE-2023-2753260
How FBI's global reach took down a cybercrime unicornCyberScoop·Aug 2, 20:18 UTC · Aug 2, 2018Data breach in the wild60
This elite cybercrime group is wreaking havoc on the U.S. restaurant industryCyberScoop·May 3, 14:37 UTC · May 3, 2017Data breach in the wild60
FIN7, FIN8, and Others Use Ragnar Loader for Persistent Access and Ransomware OperationsThe Hacker News·Mar 8, 11:50 UTC · Mar 8, 2025Ransomware60
DOJ arrests three Ukrainians allegedly tied to FIN7 hacking gangCyberScoop·Aug 1, 18:12 UTC · Aug 1, 2018Exploit / PoC in the wild60
SafeBreach adds support for new advanced attacks to the Microsoft Defender for Endpoint evaluation labHelp Net Security·Jul 17, 00:00 UTC · Jul 17, 2021Ransomware60
'Cobalt Group' launches new campaign against banks in Romania, RussiaCyberScoop·Aug 30, 22:43 UTC · Aug 30, 2018Threat actor in the wild60
H1 2022: Malware and Vulnerability Trends ReportRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025VulnerabilityCVE-2021-34473CVE-2021-34523CVE-2021-31207160
Ransomware groups pose as fake tech support over TeamsCyberScoop·Jan 21, 22:52 UTC · Jan 21, 2025Ransomware in the wild60
Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p RansomwareThe Hacker News·Apr 29, 04:05 UTC · Apr 29, 2023Ransomware in the wildCVE-2023-27351CVE-2023-27532CVE-2023-138960
TA505 hacking crew spent much of 2019 trying to breach South Korea's financial sectorCyberScoop·Feb 28, 22:02 UTC · Feb 28, 2020Ransomware in the wild60
Ransomware attackers are "vishing" organizations via Microsoft TeamsHelp Net Security·Jan 21, 00:00 UTC · Jan 21, 2025Ransomware60
Security Affairs newsletter Round 486 by Pierluigi PaganiniSecurity Affairs·Aug 25, 07:19 UTC · Aug 25, 2024Ransomware in the wild60
Week in review: CrowdStrike update causes widespread IT outage, critical Splunk Enterprise flawHelp Net Security·Jul 29, 16:16 UTC · Jul 29, 2024Data breachCVE-2024-36991CVE-2024-39929CVE-2024-20401+2 CVEs60
Security Affairs newsletter Round 416 by Pierluigi PaganiniSecurity Affairs·Apr 23, 07:51 UTC · Apr 23, 2023Ransomware in the wild60
US offers $10 million reward for info on Darkside ransomware groupThe Record·Dec 19, 00:00 UTC · Dec 19, 2022Ransomware60