Velociraptor leveraged in ransomware attacksCisco Talos·Oct 9, 10:00 UTC · Oct 9, 2025RansomwareCVE-2025-626460
Unmasking Termite, the Ransomware Gang Claiming the Blue Yonder AttackInfosecurity Magazine·Dec 9, 12:35 UTC · Dec 9, 2024Ransomware57
Ransomware gang threatens to expose police informants if ransom is not paidThe Record·Dec 5, 00:00 UTC · Dec 5, 2022Ransomware57
Ransomware Gang Leaks Metropolitan Police Data After Failed NegotiationsThe Hacker News·May 12, 08:28 UTC · May 12, 2021Ransomware57
Ransomware Group Threatens DC Cops with Informant Data LeakInfosecurity Magazine·Apr 27, 09:28 UTC · Apr 27, 2021Ransomware57
What to do with that fancy new internet-connected device you got as a holiday giftCisco Talos·Jan 18, 19:00 UTC · Jan 18, 2024Ransomware in the wildCVE-2023-46805CVE-2024-2188760
Behind the Scenes of Matveev's Ransomware Empire: Tactics and TeamThe Hacker News·Dec 21, 12:16 UTC · Dec 21, 2023Ransomware57
New Buhti ransomware uses leaked payloads and public exploitsHelp Net Security·May 26, 00:00 UTC · May 26, 2023Ransomware57
US Gov offers a $10M reward for a Russian ransomware actorSecurity Affairs·May 17, 13:07 UTC · May 17, 2023Ransomware60
New ‘RA’ ransomware group using leaked source code to launch attacksThe Record·May 15, 21:04 UTC · May 15, 2023Ransomware57
Ransomware group claims 2.5 terabytes of stolen data less than a month after emerging onlineCyberScoop·May 15, 12:00 UTC · May 15, 2023Ransomware57
RTM Locker Ransomware Targets Linux ArchitectureInfosecurity Magazine·Apr 27, 17:00 UTC · Apr 27, 2023Ransomware57
Rorschach Ransomware Emerges: Experts Warn of Advanced Evasion StrategiesThe Hacker News·Apr 6, 03:23 UTC · Apr 6, 2023RansomwareCVE-2022-41352160
Ransomware gang leaks data from US military contractor the PDI GroupThe Record·Jan 24, 00:00 UTC · Jan 24, 2023Ransomware57
Yanluowang Ransomware's Russian Links Laid BareInfosecurity Magazine·Nov 23, 10:30 UTC · Nov 23, 2022Ransomware57
Threat Source newsletter (Nov. 4, 2021)Cisco Talos·Nov 4, 18:00 UTC · Nov 4, 2021Ransomware in the wild60
Is the Groove ransomware gang is a motley crew of disgruntled hackers, or a hoax?CyberScoop·Sep 9, 20:41 UTC · Sep 9, 2021Ransomware in the wild60
Ransomware Gangs and the Name Game DistractionKrebs on Security·Aug 5, 12:12 UTC · Aug 5, 2021Ransomware60
Evil Corp Rebrands Ransomware to Escape SanctionsInfosecurity Magazine·Jun 8, 11:58 UTC · Jun 8, 2021Ransomware57
IR Trends Q3 2025: ToolShell attacks dominate, highlighting criticality of segmentation and rapid responseCisco Talos·Oct 23, 10:00 UTC · Oct 23, 2025Ransomware in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+1 CVEs160
Notorious ransomware programmer Mikhail Pavlovich Matveev arrested in RussiaSecurity Affairs·Nov 30, 07:30 UTC · Nov 30, 2024Ransomware57
BlueSky Ransomware: Fast Encryption via MultithreadingPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024RansomwareCVE-2020-0796CVE-2021-173260
Russian Hacker “Wazawaka” Indicted for RansomwareKrebs on Security·May 15, 00:00 UTC · May 15, 2023Ransomware57
Experts fear LockBit spread after ransomware builder leakedThe Record·Jan 10, 00:00 UTC · Jan 10, 2023Ransomware57
Emsisoft: Victims of AstraLocker and Yashma ransomware can recover their files for freeSecurity Affairs·Jul 8, 14:04 UTC · Jul 8, 2022Ransomware57
AstraLocker ransomware operators shut down their operationsSecurity Affairs·Jul 5, 08:21 UTC · Jul 5, 2022Ransomware57
Avast releases free decrypters for AtomSilo and LockFile ransomwareSecurity Affairs·Oct 27, 23:43 UTC · Oct 27, 2021Ransomware57
DC Officer Info Leaked Online by Ransomware Group: ReportInfosecurity Magazine·Apr 30, 09:30 UTC · Apr 30, 2021Ransomware57
Hackers Threaten to Leak D.C. Police Informants' Info If Ransom Is Not PaidThe Hacker News·Apr 27, 11:59 UTC · Apr 27, 2021Ransomware57
ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs RisingThe Hacker News·Nov 5, 10:38 UTC · Nov 5, 2025Malware in the wildCVE-2017-1188260
Play Ransomware Exploited Windows CVE-2025-29824 as ZeroThe Hacker News·May 8, 05:38 UTC · May 8, 2025RansomwareCVE-2025-29824CVE-2024-2616960
New 'Bring Your Own Installer (BYOI)' technique allows to bypass EDRSecurity Affairs·May 6, 08:57 UTC · May 6, 2025Ransomware57
Ransomware Attacks Fall Sharply in MarchInfosecurity Magazine·Apr 24, 11:30 UTC · Apr 24, 2025Ransomware57
Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 ServersThe Hacker News·Apr 3, 07:21 UTC · Apr 3, 2025RansomwareCVE-2023-38831CVE-2021-2685560
VanHelsing RaaS Launch: 3 Victims, $5K Entry Fee, MultiThe Hacker News·Mar 25, 03:08 UTC · Mar 25, 2025RansomwareCVE-2024-55591CVE-2025-2447260
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
New ‘Termite’ ransomware group claims responsibility for Blue Yonder cyberattackCyberScoop·Dec 9, 19:21 UTC · Dec 9, 2024Ransomware in the wild60