
Krebs identifies a St. Petersburg man as Qilin ransomware admin
Leaked records and forum pivots name 36-year-old Aleksey Yakovtsev; Qilin claims 365 victims in three months.
127 stories, newest first · one card per story

Leaked records and forum pivots name 36-year-old Aleksey Yakovtsev; Qilin claims 365 victims in three months.
The unnamed 41-year-old was arrested near Gloucester under the National Security Act and remains in custody in London.

A week later, 60% of shared hosting and 40% of managed dedicated servers were restored; VPS file backups exist for about half of users.
The pro-Russian hacktivist group offers cryptocurrency rewards for additional target information.

AI-assisted disinformation campaign used fake emails and local organization to target schools in Peru and Ecuador.
Sekoia says the SVR-linked group watered legitimate and spoofed websites and compromised Plerdy analytics to steal messages, passwords and photos from iPhones and Androids.
A cyberattack has wiped cloud data at Beget, one of Russia's largest hosting providers, disrupting hundreds of websites.
Hackers compromised the website management system and newsletter service, publishing false messages about Zelensky launching nuclear warheads.
Attackers erased data on over 1,000 servers at Russian hosting provider Beget, disrupting websites and services.

Hackers demand $500-$600 to unlock hijacked Li Auto cars in Russia using leaked VINs and eSIMs; number of victims likely exceeds 20.

Putin’s decree allows foreign data centers in consultation with Russia’s Federal Security Service to support sovereign internet policy.
Fake nuclear threat alerts sent in Ukraine after app hack as ceasefire ends

Ukraine's Air Alert and Russia's Emergencies Ministry apps sent false nuclear strike and radiation alerts; notifications disabled and services restored.

Gorbag used spearphishing and WinRAR exploits to harvest credentials and documents from Ukrainian justice, law enforcement and defense entities.
Gorbag steals data from Ukrainian defense and law enforcement using phishing and WinRAR exploit.

Gorbag deploys BeautyStealer after exploiting a now-patched WinRAR flaw in attacks on Ukrainian targets.

Gorbag harvests intelligence from Ukrainian law enforcement and frontline administrations using spearphishing since February 2025.

Three scenarios project AI-cyber capability proliferation by 2028, with Russia and China as primary threats.
Hackers claimed to have stolen data from Rosstat and replaced website content with Ukrainian statistics, but the agency disputed the breach.
Hackers compromised Ukraine's Air Alert app spreading fake nuclear and radiation warnings; similar hack claimed on Russia's EMERCOM app.

False nuclear and radiation warnings spread via compromised apps in Ukraine and Russia.

Ukraine shut Air Alert after false radiation and chemical warnings; Russia said its emergency app was also attacked.
The 48-store chain closed some shops and took its site and app offline, with no word on stolen data.
Treasury says two Russians each moved about $3.5 million in crypto tied to North Korean IT workers in Russia.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views