Ransomware Organizations Worldwide Targeted in Rapidly Evolving Buhti Ransomware Operation The recently identified Buhti operation uses LockBit and Babuk ransomware variants to target Linux and Windows systems. Ionut ArghireMay 26, 2023
Nation-State Researchers Spot APTs Targeting Small Business MSPs Proofpoint warns that APT actors linked to Russia, Iran and North Korea are increasingly targeting small- and medium-sized businesses. Ryan NaraineMay 24, 2023
Ransomware Rheinmetall Says Military Business Not Impacted by Ransomware Attack Rheinmetall confirms being hit by Black Basta ransomware group, but says its military business is not affected. Eduard KovacsMay 23, 2023
Ransomware Dish Ransomware Attack Impacted Nearly 300,000 People Satellite TV giant Dish Network says the recent ransomware attack impacted nearly 300,000 people and its notification suggests a ransom has been paid. Eduard KovacsMay 22, 2023
Ransomware Critical Infrastructure Organizations Warned of BianLian Ransomware Attacks CISA, FBI, and ACSC warn critical infrastructure organizations of the BianLian ransomware group’s attacks. Ionut ArghireMay 17, 2023
ICS/OT Lacroix Closes Production Sites Following Ransomware Attack Technological equipment supplier Lacroix has closed three production sites after experiencing a ransomware attack. Ionut ArghireMay 17, 2023
Cybercrime US Offering $10M Reward for Russian Man Charged With Ransomware Attacks The US is offering a $10 million reward for information on a Russian man accused of launching ransomware attacks on critical infrastructure. Eduard KovacsMay 17, 2023
Ransomware New Babuk-Based Ransomware Targeting Organizations in US, Korea An emerging ransomware gang called RA Group is targeting organizations in the US and South Korea. Ionut ArghireMay 16, 2023
Cybercrime PharMerica Discloses Data Breach Impacting 5.8 Million Individuals The personal information of more than 5.8 million was compromised in a data breach at national pharmacy network PharMerica. Ionut ArghireMay 15, 2023
Ransomware Leaked Babuk Code Fuels New Wave of VMware ESXi Ransomware SentinelOne sees multiple threat groups adopting the leaked Babuk source code to build their own VMware ESXi lockers. Ionut ArghireMay 12, 2023
Ransomware CISA, FBI: Ransomware Gang Exploited PaperCut Flaw Against Education Facilities CISA and FBI have observed a ransomware gang exploiting a recent PaperCut vulnerability in attacks targeting the education facilities subsector. Ionut ArghireMay 12, 2023
ICS/OT Dragos Says Ransomware Gang Accessed Limited Data but Failed at Extortion Scheme ICS cybersecurity vendor Dragos discloses breach and data theft but says ransomware group failed at elaborate extortion scheme. Ryan NaraineMay 10, 2023
Ransomware Ransomware Group Claims Attack on Constellation Software The Alphv/BlackCat ransomware group claims to have stolen more than 1TB of data from Constellation Software. Ionut ArghireMay 8, 2023
Ransomware $1.1M Paid to Resolve Ransomware Attack on California County A $1.1 million payment was made to resolve a ransomware attack on San Bernardino county’s law enforcement computer network. Associated PressMay 8, 2023
Data Breaches Western Digital Confirms Ransomware Group Stole Customer Information Western Digital has confirmed that a ransomware group has stolen customer and other information from its systems. Eduard KovacsMay 8, 2023
Ransomware Using Threat Intelligence to Get Smarter About Ransomware Given the crippling effects ransomware has had and indications that these types of attacks aren’t slowing down, it makes sense to look to threat... Marc SolomonMay 4, 2023
Ransomware Ransomware Attack Affects Dallas Police, Court Websites Dallas was hit with a ransomware attack that brought down its Police Department and City Hall websites on May 3rd. Associated PressMay 3, 2023
Ransomware Leaked Files Show Extent of Ransomware Group’s Access to Western Digital Systems Ransomware group leaked files showing the extent of their access to Western Digital systems and how they monitored the company’s initial response to the... Eduard KovacsMay 2, 2023
Ransomware RTM Locker Ransomware Variant Targeting ESXi Servers A newly identified variant of the RTM Locker ransomware is targeting Linux, NAS, and ESXi hosts. Ionut ArghireApril 28, 2023
Ransomware Microsoft: Cl0p Ransomware Exploited PaperCut Vulnerabilities Since April 13 Microsoft says Cl0p ransomware operator has been exploiting a recently patched PaperCut vulnerability since April 13. Ionut ArghireApril 27, 2023