Ransomware

Cyber Attack – Hackers Use Malicious .HTA Files to Spread Red Ransomware

Security researchers at CloudSEK have uncovered a sophisticated malware delivery campaign using Clickfix-themed websites to distribute Epsilon Red ransomware, marking…

9 months ago

FBI Alerts on Cybercriminal Network Tied to Ransomware-as-a-Service Operators

The Federal Bureau of Investigation has issued a stark warning about "Hacker Com," a sophisticated subset of an international cybercriminal…

9 months ago

BlackSuit Ransomware’s Data Leak Platform and Negotiation Portal Taken Down

A significant victory against cybercrime this week through Operation Checkmate, a coordinated effort that successfully seized the primary infrastructure used…

9 months ago

How Ransomware Gangs Exploit RMM Tools to Breach and Steal Corporate Data

In recent months, cybersecurity researchers have observed a surge in ransomware gangs weaponizing legitimate Remote Monitoring and Management (RMM) tools…

9 months ago

New Chaos RaaS Group Using Voice Social Engineering & RMM Abuse for Data Exfiltration

A sophisticated new ransomware-as-a-service operation called Chaos that emerged in February 2025, employing advanced social engineering tactics and legitimate tools…

9 months ago

FBI Alerts About Hacker Community Tied to Ransomware-as-a-Service Gangs

The Federal Bureau of Investigation has issued a stark warning about an evolving cybercriminal ecosystem called "Hacker Com," a sophisticated…

9 months ago

GLOBAL GROUP Launches Golang-Based Ransomware Targeting Windows, Linux, and macOS Systems

A new ransomware-as-a-service operation, called GLOBAL GROUP, has emerged on cybercrime forums; however, forensic analysis reveals it's a sophisticated rebranding…

9 months ago

Chinese SM2 Cryptographic Standard Exploited in Windows System Attacks by NailaoLocker Ransomware

A new ransomware variant dubbed NailaoLocker is making waves in cybersecurity circles for its sophisticated deployment of the Chinese SM2 cryptographic standard,…

9 months ago

Windows Management Instrumentation Exploited by New KAWA4096 Ransomware to Erase Shadow Copies

June 2025 has witnessed the emergence of a formidable new ransomware, KAWA4096, which exploits Windows Management Instrumentation (WMI) to erase…

9 months ago

OVERSTEP Ransomware Deployed Through Exploited 0-Day RCE Vulnerability in SonicWall SMA Devices

Google Threat Intelligence Group (GTIG) has uncovered a sophisticated campaign by the financially motivated threat actor UNC6148, targeting fully patched…

9 months ago