HYFLOCK ransomware encrypts files and blocks recovery
Partial recovery of some Office documents possible but certain builds corrupt files permanently.
Stories per day · 30 days
3 RSS
20 stories, newest first · one card per story
Stories tagged #raas
Germany Arrests Suspected Qilin Ransomware Leader After Japan Detention
Germany arrested a suspected Qilin leader extradited from Japan, while the gang kept listing new victims.
4
Germany arrests alleged core Qilin ransomware member after extradition
Germany arrested an alleged core Qilin ransomware member, a Russian national extradited from Japan, over a ransomware attack in Germany.
4
Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds
CloudSEK exposes Gentlemen RaaS affiliate 'Azazel' who diverted extortion proceeds via his own Leakned leak site after compromising 25+ victims across six countries.
4
Police Target KillSec Ransomware Group with Arrests and Seizures
European police seized KillSec infrastructure and arrested suspects, including a 16-year-old alleged ringleader.
4
Risky Bulletin: Authorities dismantle KillSec group, arrest members across Europe
European police dismantled the KillSec ransomware gang, arresting three suspects including a 16-year-old administrator.
5
Using Threat Intelligence to Stop Ransomware Attacks
Recorded Future says threat intelligence can flag ransomware access and infrastructure before files are encrypted.
2
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
Microsoft Threat Intelligence has observed Storm-2570, a ransomware affiliate linked to multiple ransomware payloads, using consistent tradecraft across deployments.
3
Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
Cisco Talos reports 90 ransomware incidents hit Japanese organizations in H1 2026, led by The Gentlemen, with Qilin using AI for efficiency.
3
Conti Ransomware Hacker Sentenced After Group Attacked Over 1,000 Victims Worldwide
Ukrainian national Oleksii Lytvynenko sentenced to four years in US prison for his role in Conti ransomware attacks on 1,000+ victims.
Panzer Ransomware Targets Italian Manufacturers and Telecom Firms With ESXi-Ready RaaS
New Panzer ransomware-as-a-service operation lists Italian firms Doimo Cucine and NTE Italia as victims, offering encryptors for Windows, Linux, FreeBSD, and ESXi.
1
New pro-Ukraine hacker group targets Russian companies with custom ransomware
F6 links new pro-Ukraine ransomware group VantaCore, likely a Thor rebrand, to seven attacks on Russian firms using custom tooling and multimillion-dollar demands.
3
GentleKiller targets more than 400 security processes across 48 products
ESET details the Gentlemen ransomware gang's in-house GentleKiller EDR-killer framework targeting over 400 security processes across 48 products, supplied to affiliates.
3
Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware
FBI warns Medusa ransomware-as-a-service has hit over 500 critical infrastructure organizations while significantly improving its tactics, techniques and procedures.
2
Medusa ransomware gang has hit over 500 organizations, CISA warns
FBI, CISA, and HHS warn Medusa ransomware has hit over 500 organizations across critical infrastructure since June 2021, using phishing and unpatched flaws.
2
More than 200 victims of Medusa ransomware identified over the last year, CISA says
CISA and FBI update Medusa ransomware advisory, reporting more than 500 total victims and warning the gang operationalizes newly disclosed exploits within 24 hours.
3
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
GuidePoint reports a ransomware affiliate posing as 'Ransom Busters' charges victims $20,000-$60,000 to delete stolen data, and details UNC6671's $8M AitM extortion wave.
3
Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics
CISA, FBI, and HHS updated their Medusa ransomware advisory, reporting over 500 victims and detailing the gang's access-broker and exploit tactics.
1
Ransomware Threats in the Americas H1 2026: Dissecting the Regional Attack Patterns and Dominant Actors
Cyble's H1 2026 report attributes 2,188 of 3,836 global ransomware attacks (57%) to the Americas, with North America absorbing 1,981 incidents.
The State of Ransomware Q2 2026
Check Point's Q2 2026 ransomware report finds dominant RaaS operations still leading while the previously concentrated ransomware landscape starts to shift.