PsExec

Why Are You Texting Me? Unc3944 Leverages Sms Phishing Campaigns for Sim Swapping, Ransomware, Extortion, and Notoriety

Aoki: Infostealer Targets AI Coding Assistant Credentials

Unmasking the Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed | Trendai (us)

Ransomware Landscape in H1 2025: Statistics and Key Issues

Threat Actor Profile: APT27

2026 Ransomware Cartelization: Qilin, LockBit and Akira Convergence

Warlock Ransomware Attackers Hit Water and Telecom Operators

Apache ActiveMQ Exploit Leads to LockBit Ransomware

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

From Campus to C2: Tracking a Persistent Chinese Operation Against Vietnamese Universities

ClickFix Campaign Generated Via AI Delivers SmartRAT

Phishing Abuses RMM Tools for Persistent Access

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

CISA Warns of Medusa Ransomware-as-a-Service Attacks Over 300 Organizations

Gunra Targets Primary and Disaster-Recovery Backups Before File Encryption

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

New Cross-Platform Ransomware Encrypts Windows, Linux, and VMware Infrastructure

Toy Ghouls’ new toy: the GenieLocker ransomware

Qilin Ransomware Exploits Palo Alto GlobalProtect Flaw for Initial Access

Spirals Attackers Disable Windows Defender and Kill Backup Services Before Encrypting Systems

CrownX Ransomware Embedded Inside Avalon Framework Targets Recovery and Backup Systems

The Gentlemen are knocking: сustom backdoors and evolving tactics

From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet

The Gentlemen ransomware: Dissecting a self-propagating Go encryptor

Kazuar: Anatomy of a nation-state botnet

Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Catch them while you can