Avos ransomware group expands with new attack arsenalCisco Talos·Jun 21, 11:58 UTC · Jun 21, 2022RansomwareCVE-2021-44228CVE-2021-45046CVE-2021-45105+1 CVEs60
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
IR Trends Q4 2025: Exploitation remains dominant, phishing campaign targets Native American tribal organizationsCisco Talos·Jan 29, 11:00 UTC · Jan 29, 2026Threat actorCVE-2025-61882CVE-2025-5518260
Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 ServersThe Hacker News·Apr 3, 07:21 UTC · Apr 3, 2025RansomwareCVE-2023-38831CVE-2021-2685560
Akira ransomware received $42M in ransom payments from over 250 victimsSecurity Affairs·Apr 21, 20:07 UTC · Apr 21, 2024RansomwareCVE-2020-3259CVE-2023-2026960
Akira Ransomware bypasses MFA on SonicWall VPNsSecurity Affairs·Sep 29, 10:52 UTC · Sep 29, 2025RansomwareCVE-2024-4076660