mimikatz Archives • Daily CyberSecurity

Tactical Evolution: Trigona Ransomware Debuts Custom Exfiltration Armory Trigona Ransomware Custom Exfiltration Tool

Tactical Evolution: Trigona Ransomware Debuts Custom Exfiltration Armory

Do Son April 25, 2026

The ransomware landscape is witnessing a sophisticated shift in how data is stolen. While most cybercriminal groups...

The “Gentlemen” Ransomware Toolkit and the Lethal z1.bat Pre-Encryption Weapon TheGentlemen Ransomware z1.bat script

The “Gentlemen” Ransomware Toolkit and the Lethal z1.bat Pre-Encryption Weapon

Do Son March 30, 2026

Researchers have uncovered a “structured, maintained operational toolkit” belonging to an affiliate of TheGentlemen ransomware-as-a-service (RaaS) group....

RansomHub Breach: Six-Day Attack Leveraged RDP, RMM Tools & Mimikatz for Data Exfiltration & Ransomware INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach

INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach

RansomHub Breach: Six-Day Attack Leveraged RDP, RMM Tools & Mimikatz for Data Exfiltration & Ransomware

Do Son June 30, 2025

The DFIR Report’s latest case study exposes the meticulous six-day operation of a threat actor who leveraged...

RansomHub Deploys Custom Backdoor ‘Betruger’ in Targeted Ransomware Attacks RansomHub ransomware gang - Betruger backdoor

RansomHub Deploys Custom Backdoor ‘Betruger’ in Targeted Ransomware Attacks

Do Son March 22, 2025

A new report from Symantec Threat Hunter Team reveals that at least one affiliate of the RansomHub...

Zyxel Vulnerability Exploited by Helldown Ransomware Group

Do Son January 26, 2025

The YIR Team (Yarix Incident Response Team), led by incident responder Claudio Vozza, has detailed a recent...

Unmasking Play Ransomware: Tactics, Techniques, and Mitigation Strategies Play Ransomware Tactics

Unmasking Play Ransomware: Tactics, Techniques, and Mitigation Strategies

Do Son January 9, 2025

Play ransomware, also known as Balloonfly or PlayCrypt, has emerged as a significant cyber threat since its...

CVE-2024-30088 Under Attack: OilRig Targets Windows Kernel Vulnerability GMX Exploit, Crypto Bounty Ubiquiti vulnerability - OilRig TTPs

CVE-2024-30088 Under Attack: OilRig Targets Windows Kernel Vulnerability

Do Son December 24, 2024

Renowned for cyber espionage activities targeting critical sectors in the Middle East, OilRig, also known as APT34...

Ignoble Scorpius Strikes Again: The Rise of BlackSuit Ransomware

Do Son November 22, 2024

The cybercrime group known as Ignoble Scorpius has resurfaced with the BlackSuit ransomware, as detailed in a...

North Korean Threat Group “Jumpy Pisces” Linked to Play Ransomware Attack Andariel hacking group - Jumpy Pisces

North Korean Threat Group “Jumpy Pisces” Linked to Play Ransomware Attack

Do Son October 31, 2024

Unit 42, the threat intelligence team at Palo Alto Networks, has uncovered a disturbing new trend in...

Supply Chain Weakness: Crypt Ghouls Exploit Contractors to Deploy Ransomware

Do Son October 20, 2024

Kaspersky Labs has identified a new cybercriminal group dubbed Crypt Ghouls, responsible for a series of ransomware...

Critical Alert 1 Active Exploit Detected Today