Tag: ransomware
1153 articles
Ransomware Recovery CEO Charged in Alleged Secret Ransom Payments Scheme
A CEO's shocking scheme to profit from ransomware recovery has landed him in hot water, accused of secretly paying off ransomers while pretending to decrypt the malware for his clients, leaving them victimized twice over. The alleged scam, which ran from 2018 to 2023, could now cost him up to 20 years in prison.
Ransomware Targets Backup Infrastructure, Pressuring Payouts
Ransomware attackers are now targeting backup infrastructure, leaving victims with a harrowing choice: pay up or lose everything. UnitedHealth's $22 million ransom payment was a stark reminder of this new reality, as they still didn't recover their data.
Trump Mobile Breach Exposes 3,615 Customers' Personal Data
A shocking data breach at Trump Mobile has exposed the personal info of 3,615 customers, including names, email addresses, phone numbers, and home addresses, to hackers. The alarming part? The company reportedly responded to the breach by saying they had no team to handle it.
Ransomware Disrupts Mississippi City's Computer Systems
The city's computer systems were temporarily shut down due to a ransomware incident on October 1, but essential services like 911, Police and Fire Departments, and utility services remained operational, ensuring public safety. Residents may experience delays with in-person utility payments until systems are restored.
ASOS Faces Suspected Snowflake Compromise, Urges Customer Caution
ASOS customers received a chilling push notification on October 6 claiming that its Snowflake instance had been fully compromised, with the sender threatening to leak sensitive data unless the company engaged with them. The ominous message, signed 'xuanyewengateway', sparked urgent warnings for customers to exercise caution.
Ransomware Affiliate Betrays Partners, Siphons Victim Funds
In a shocking betrayal, a rogue ransomware affiliate named Azazel secretly siphoned off victim funds and ran his own leak site, defying the standard rules of the ransomware-as-a-service partnership. This brazen move not only hurt his partners but also left victims vulnerable to further exploitation.
Engineer Sentenced for Ransomware-Style Attack on Employer Network
A trusted insider turned rogue, launching a deliberate ransomware-style attack on his former employer's network, culminating in a ransom demand. The perpetrator, a 57-year-old former engineer, used an administrator account to remotely access the company's network without authorization over several days.
US Water Systems Face Growing Cyber Threats
US water systems are under siege by cyber threats from hostile nations like China, Russia, Iran, and North Korea, as well as ransomware groups, putting our critical infrastructure at risk of a nationwide public-health crisis. This summer's alarming attacks on water systems in 12 states by Iranian hackers exposed the vulnerability of our water infrastructure to foreign adversaries.
Warlock Targets SharePoint Deployments with Ransomware via Exploited Flaws
Warlock, a suspected China-linked threat actor, has launched targeted ransomware attacks on at least four organizations, including critical infrastructure operators, via exploited flaws in on-premises Microsoft SharePoint Server deployments. The victims, located in Portuguese- and Spanish-speaking countries, span across Europe, Africa, and Latin America.
Law Enforcement Disrupts KillSec Ransomware Group with Global Arrests
In a major breakthrough, global law enforcement agencies have joined forces to dismantle the notorious KillSec ransomware group, arresting suspected operators and disrupting their operations. The crackdown, dubbed Operation KillSwitch, targeted the group behind a string of devastating attacks on hospitals, government bodies, and financial institutions.
Authorities Disrupt KillSec Extortion Group in Global Operation
In a major breakthrough, law enforcement agencies from 10 countries joined forces to dismantle the notorious KillSec Extortion Group, seizing key infrastructure and arresting three suspects behind the gang's notorious extortion spree that compromised around 500 organizations. This global operation, dubbed "Operation KillSwitch," resulted in the confiscation of 110 terabytes of data and critical servers used by the group.
Police Disrupt KillSec Ransomware Group, Arrest Suspects Worldwide
In a major cybercrime crackdown, international law enforcement agencies joined forces to dismantle the notorious KillSec Ransomware Group, arresting suspects and seizing key servers, domains, and cryptocurrency wallets. The operation resulted in a massive haul of at least 110 terabytes of data, dealing a significant blow to the group's extortion campaign.
Law Enforcement Disrupts KillSec Ransomware Gang Led by Teenager
In a major breakthrough, international authorities have successfully disrupted the notorious KillSec Ransomware Gang, led by a teenager, in a coordinated effort dubbed Operation KillSwitch. The operation, backed by Europol and cybersecurity experts, has taken down the gang's servers, dark-web leak site, and seized a staggering 110 terabytes of stolen data.
Dutch Police Apprehend Alleged ShinyHunters Leader
A major blow has been dealt to the notorious ShinyHunters cybercrime group with the arrest of a 24-year-old man in Amsterdam, accused of helping to orchestrate a string of high-profile extortion attacks that have netted at least $70 million since last year. The suspect has been ordered to be detained for 90 days in Rotterdam as authorities continue to crack down on the group's activities.
Dutch Hacker Arrest Sparks ShinyHunters Escalation
In a show of solidarity, ShinyHunters vowed to support their team member, providing emotional, mental, and financial backing, as well as a criminal defense lawyer, amid a Dutch investigation that led to the arrest of 24-year-old Pepijn van der Stap. The group made the statement in response to reports about the suspected member's detention in mid-September.
Microsoft Warns of Azure Identity Hijacking in Destructive Cloud Attacks
In just 18 hours, a concentrated cloud assault on an Azure tenant combined lightning-fast reconnaissance, credential harvesting, and resource destruction - a stark warning of the devastating potential of Azure identity hijacking. Microsoft researchers uncovered the attack, linked to a notorious group known as Storm-3168, which used compromised service principals to wreak havoc.
JadePuffer AI Attacks Destroy Azure Cloud Resources
Meet JadePuffer, a new ransomware operator that's wreaking havoc on Azure Cloud Resources with its advanced AI-driven attacks, automating everything from reconnaissance to data encryption. Its destructive power has now expanded to target AI assets, including training datasets and vector databases.
Bitget Resumes Bitcoin Withdrawals After $387.5 Million Crypto Heist
Bitget has resumed Bitcoin withdrawals after a brief pause, taken as a security measure following a $387.5 million crypto heist, and has shared a schedule to bring other withdrawal services back online. The exchange assured users that the temporary pause was not related to the availability of their assets.
ShinyHunters Exploits Grav CMS Flaw to Breach Clop Leak Site
The Grav CMS flaw, tracked as CVE-2026-42608, was exploited by ShinyHunters to breach the Clop gang's leak site, and the vulnerability has since been patched in Grav's 2.0 and 1.7 branches. Grav confirmed the legitimacy of the flaw and the threat actor's description, and has implemented a fix to prevent further attacks.
Ransomware Gang n0n Threatens Backup Destruction to Press Victims
Meet the ransomware gang n0n, a new player in the cybercrime scene that's taking extortion to the next level by threatening to destroy or encrypt backup systems, leaving victims with a daunting choice: pay up or lose everything. Organizations are urged to take immediate action to protect themselves from this double-extortion threat.
Ransomware gangs exploit TeamCity flaw in targeted attacks
A critical TeamCity vulnerability, now patched, could let attackers run malicious commands and bypass security checks, putting sensitive data and configurations at risk. This flaw highlights the importance of updating to versions 2025.11.7 and 2026.1.3 to safeguard against potential threats.
Spokane Public Schools Hit by Network Security Breach
To prioritize safety, Spokane Public Schools swiftly took their online systems offline after detecting a network security breach, following established crisis protocols to assess the situation. The district is now working diligently to understand the scope of the incident and minimize its impact.
Ransomware Attacks Soar to Record 1073 in August
Ransomware attacks just hit a record high, with a staggering 1,073 organizations falling victim in August - a 12% surge from the previous month and a clear sign that these threats are on the rise. This worrying trend marks the second consecutive month of peak activity, with North America bearing a significant 44% of the incidents.
ShinyHunters Breaches FBI via PeopleSoft Zero-Day Exploit
The notorious hacking group ShinyHunters has boldly claimed to have breached FBI data, posting personnel records of all employees and applicants on its leak site in a brazen act of retaliation. The stolen records reportedly include sensitive info like addresses, phone numbers, and dates of birth for around 5,000 FBI employees.