Analyzing the familiar tools used by the Crypt Ghouls hacktivistsKaspersky Securelist·Oct 18, 10:00 UTC · Oct 18, 2024Ransomware57
New GenieLocker ransomware for Windows, ESXi, and LinuxKaspersky Securelist·Jul 30, 08:00 UTC · Jul 30, 2026Ransomware57
Avos ransomware group expands with new attack arsenalCisco Talos·Jun 21, 11:58 UTC · Jun 21, 2022RansomwareCVE-2021-44228CVE-2021-45046CVE-2021-45105+1 CVEs60
Head Mare and Twelve: Joint attacks on Russian entitiesKaspersky Securelist·Mar 13, 10:07 UTC · Mar 13, 2025RansomwareCVE-2023-38831CVE-2021-2685560
Threat actor believed to be spreading new MedusaLocker variant since 2022Cisco Talos·Oct 3, 10:00 UTC · Oct 3, 2024Threat actor57
IR Trends Q4 2025: Exploitation remains dominant, phishing campaign targets Native American tribal organizationsCisco Talos·Jan 29, 11:00 UTC · Jan 29, 2026Threat actorCVE-2025-61882CVE-2025-5518260
Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 ServersThe Hacker News·Apr 3, 07:21 UTC · Apr 3, 2025RansomwareCVE-2023-38831CVE-2021-2685560
OmniVision disclosed a data breach after the 2023 Cactus ransomware attackSecurity Affairs·May 22, 07:40 UTC · May 22, 2024Ransomware57
Cactus ransomware gang claims the theft of 1.5TB of data from Energy management and industrial automation firm Schneider ElectricSecurity Affairs·Feb 20, 07:01 UTC · Feb 20, 2024Ransomware57
Cactus ransomware gang claims the Schneider Electric hackSecurity Affairs·Jan 30, 08:00 UTC · Jan 30, 2024Ransomware57
Cactus RANSOMWARE gang hit the Swedish retail and grocery provider CoopSecurity Affairs·Jan 1, 12:35 UTC · Jan 1, 2024Ransomware57
New CACTUS ransomware appeared in the threat landscapeSecurity Affairs·May 9, 09:44 UTC · May 9, 2023Ransomware57
Russian-speaking cybercrime evolution: What changed from 2016 to 2021Kaspersky Securelist·Oct 21, 13:02 UTC · Oct 21, 2021Ransomware57
Incident Response Analyst Report of 2019Kaspersky Securelist·Aug 6, 10:00 UTC · Aug 6, 2020Ransomware57
Akira ransomware received $42M in ransom payments from over 250 victimsSecurity Affairs·Apr 21, 20:07 UTC · Apr 21, 2024RansomwareCVE-2020-3259CVE-2023-2026960
Akira Ransomware bypasses MFA on SonicWall VPNsSecurity Affairs·Sep 29, 10:52 UTC · Sep 29, 2025RansomwareCVE-2024-4076660