CISA: LockBit behind 1 in 6 U.S. gov’t ransomware attacks in 2022The Record·Jun 14, 21:22 UTC · Jun 14, 2023RansomwareCVE-2023-0669CVE-2023-27350160
LockBit disrupted by international law enforcement task forceHelp Net Security·Feb 20, 00:00 UTC · Feb 20, 2024RansomwareCVE-2023-382460
Copycat Criminals mimicking Lockbit gang in northern EuropeSecurity Affairs·Jan 28, 21:58 UTC · Jan 28, 2023Ransomware in the wild60
Australian Cyber Security Centre warns of a surge of LockBit 2.0 ransomware attacksSecurity Affairs·Aug 9, 11:41 UTC · Aug 9, 2021Ransomware in the wildCVE-2018-1337960
Australian cybersecurity agency warns of spike in LockBit ransomware attacksThe Record·Jan 18, 00:00 UTC · Jan 18, 2023RansomwareCVE-2018-1337960
Head Mare hacktivists: attacks on companies in Russia and BelarusKaspersky Securelist·Sep 2, 10:00 UTC · Sep 2, 2024RansomwareCVE-2023-3883160
Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double ExtortionThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025RansomwareCVE-2024-57727CVE-2024-57728CVE-2024-5772660
Concerns grow as LockBit knockoffs increasingly target popular vulnerabilitiesThe Record·Oct 19, 19:27 UTC · Oct 19, 2023RansomwareCVE-2023-4004460
PaperCut vulnerabilities leveraged by Clop, LockBit ransomware affiliatesHelp Net Security·Apr 27, 00:00 UTC · Apr 27, 2023RansomwareCVE-2023-27350CVE-2023-2735160
‘Citrix Bleed’ vulnerability targeted by nationThe Record·Nov 21, 19:18 UTC · Nov 21, 2023Vulnerability in the wildCVE-2023-4966CVE-2023-491160
Storm-2603 Deploys DNS-Controlled Backdoor in Warlock and LockBit Ransomware AttacksThe Hacker News·Aug 6, 14:41 UTC · Aug 6, 2025RansomwareCVE-2025-49706CVE-2025-4970460
Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest AttacksThe Hacker News·Oct 24, 05:31 UTC · Oct 24, 2024RansomwareCVE-2020-3259CVE-2023-20263CVE-2023-20269+5 CVEs60
Boeing investigating leaked data after LockBit allegedly publishes stolen infoThe Record·Nov 13, 20:47 UTC · Nov 13, 2023RansomwareCVE-2023-496660
Buhti ransomware op uses rebranded LockBit and Babuk payloadsSecurity Affairs·May 27, 10:56 UTC · May 27, 2023RansomwareCVE-2023-27350CVE-2022-4798660
LockBit Remains Most Prolific Ransomware in Q3Infosecurity Magazine·Nov 16, 09:30 UTC · Nov 16, 2022RansomwareCVE-2017-11882CVE-2018-0798CVE-2018-080260
SuperBlack Ransomware operators exploit Fortinet Firewall flaws in recent attacksSecurity Affairs·Mar 14, 12:02 UTC · Mar 14, 2025RansomwareCVE-2024-55591CVE-2025-2447260
Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p RansomwareThe Hacker News·Apr 29, 04:05 UTC · Apr 29, 2023Ransomware in the wildCVE-2023-27351CVE-2023-27532CVE-2023-138960
PaperCut exploits used to deliver Cl0p & LockBit ransomwareSecurity Affairs·Apr 27, 14:36 UTC · Apr 27, 2023RansomwareCVE-2023-27350CVE-2023-27351160
SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and OthersThe Hacker News·Aug 8, 04:01 UTC · Aug 8, 2025RansomwareCVE-2024-3819660
Akira, LockBit actively searching for vulnerable Cisco ASA devicesHelp Net Security·Feb 22, 08:54 UTC · Feb 22, 2024RansomwareCVE-2020-3259CVE-2020-358060
LockBit Dominates Ransomware Campaigns in 2022: Deep InstinctInfosecurity Magazine·Nov 1, 15:00 UTC · Nov 1, 2022Ransomware in the wild60
Quarterly Report: Incident Response Trends in Q3 2022Cisco Talos·Oct 25, 12:00 UTC · Oct 25, 2022RansomwareCVE-2020-147260
Velociraptor leveraged in ransomware attacksCisco Talos·Oct 9, 10:00 UTC · Oct 9, 2025RansomwareCVE-2025-626460
DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer EndpointsThe Hacker News·May 30, 03:58 UTC · May 30, 2025RansomwareCVE-2024-57727CVE-2024-57728CVE-2024-5772660
Kaspersky crimeware report: ransomware propagation and driver abuseKaspersky Securelist·Dec 5, 10:00 UTC · Dec 5, 2022RansomwareCVE-2022-26522CVE-2022-2652360
Researchers Share Techniques to Uncover Anonymized Ransomware Sites on Dark WebThe Hacker News·Jul 6, 06:06 UTC · Jul 6, 2022RansomwareCVE-2021-3452760
New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD AttackThe Hacker News·Jan 24, 08:57 UTC · Jan 24, 2026RansomwareCVE-2019-1158060
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and TipsThe Hacker News·Dec 23, 12:14 UTC · Dec 23, 2024RansomwareCVE-2024-12727CVE-2024-12728CVE-2024-12729+23 CVEs160
Ransomware Surges Annually Despite Law Enforcement TakedownsInfosecurity Magazine·Jul 11, 10:45 UTC · Jul 11, 2024RansomwareCVE-2024-457760
Ransomware Groups Increasingly Deploy EDR Kill TechniquesInfosecurity Magazine·Jul 27, 10:01 UTC · Jul 27, 2026RansomwareCVE-2025-5777CVE-2024-40766CVE-2024-5559160
Cybercriminals can go from click to compromise in less than a dayHelp Net Security·Apr 23, 13:42 UTC · Apr 23, 2026RansomwareCVE-2018-1337960
Cybercrime stats you can't ignoreHelp Net Security·Apr 18, 08:56 UTC · Apr 18, 2025RansomwareCVE-2021-4422860
New but 'immature' ransomware group CosmicBeetle targets small businessesThe Record·Sep 12, 14:38 UTC · Sep 12, 2024Ransomware in the wild60
Daily Malicious Files Soar 3% in 2023, Kaspersky FindsInfosecurity Magazine·Dec 26, 10:00 UTC · Dec 26, 2023RansomwareCVE-2023-34362CVE-2023-35036CVE-2023-35708+1 CVEs60
Rorschach Ransomware Emerges: Experts Warn of Advanced Evasion StrategiesThe Hacker News·Apr 6, 03:23 UTC · Apr 6, 2023RansomwareCVE-2022-41352160
North Korean Hackers Targeting Small and Midsize Businesses with H0lyGh0st RansomwareThe Hacker News·Jul 26, 11:51 UTC · Jul 26, 2022RansomwareCVE-2022-2635260
Bangkok Airlines Admits Attackers Stole Passenger DataInfosecurity Magazine·Aug 31, 09:34 UTC · Aug 31, 2021RansomwareCVE-2018-1337960
Quarterly Report: Incident Response trends in Summer 2020Cisco Talos·Sep 1, 15:00 UTC · Sep 1, 2020RansomwareCVE-2019-1893560
Colt Discloses Breach After Warlock Ransomware Group Puts Files Up for SaleSecurity Affairs·Aug 22, 08:05 UTC · Aug 22, 2025RansomwareCVE-2025-5377060