mimikatz

GodDamn Ransomware Rebrands Beast and Uses a Malicious Signed Driver to Disable Defenses

• Malware

GodDamn Ransomware Rebrands Beast and Uses a Malicious Signed Driver to Disable Defenses

Do Son July 15, 2026 0

GodDamn ransomware is the latest Beast ransomware rebrand from Hyadina. It uses a Microsoft-signed malicious kernel driver, PoisonX, to disable EDR.

Tactical Evolution: Trigona Ransomware Debuts Custom Exfiltration Armory

• Cybercriminals

Tactical Evolution: Trigona Ransomware Debuts Custom Exfiltration Armory

Do Son April 25, 2026 0

Trigona ransomware swaps Rclone for a custom tool that rotates connections to evade monitoring. Learn how uploader_client.exe powers their data theft.

The “Gentlemen” Ransomware Toolkit and the Lethal z1.bat Pre-Encryption Weapon

• Malware

The “Gentlemen” Ransomware Toolkit and the Lethal z1.bat Pre-Encryption Weapon

Do Son March 30, 2026 0

Hunt.io uncovers a Gentlemen ransomware toolkit on a bulletproof host. Learn how the z1.bat script destroys defenses and backups before encryption.

RansomHub Breach: Six-Day Attack Leveraged RDP, RMM Tools & Mimikatz for Data Exfiltration & Ransomware

• Malware

RansomHub Breach: Six-Day Attack Leveraged RDP, RMM Tools & Mimikatz for Data Exfiltration & Ransomware

Do Son June 30, 2025 0

A six-day RansomHub attack exploited RDP, used Atera/Splashtop RMM, Mimikatz, and Rclone to breach an enterprise, exfiltrate data, and deploy ransomware.

RansomHub Deploys Custom Backdoor ‘Betruger’ in Targeted Ransomware Attacks

• Malware

RansomHub Deploys Custom Backdoor ‘Betruger’ in Targeted Ransomware Attacks

Do Son March 22, 2025 0

Explore the new Betruger backdoor used by RansomHub affiliates in ransomware attacks. Discover its unique functionalities.

Zyxel Vulnerability Exploited by Helldown Ransomware Group

• Malware
• Vulnerability

Zyxel Vulnerability Exploited by Helldown Ransomware Group

Do Son January 26, 2025 0

Learn about the recent campaign by Helldown ransomware group targeting Zyxel devices and the vulnerabilities exploited.

Unmasking Play Ransomware: Tactics, Techniques, and Mitigation Strategies

• Malware

Unmasking Play Ransomware: Tactics, Techniques, and Mitigation Strategies

Do Son January 9, 2025 0

Learn about the collaboration of Play ransomware with the Andariel group. Explore the tactics used in this sophisticated cyber attack.

CVE-2024-30088 Under Attack: OilRig Targets Windows Kernel Vulnerability

• Cyber Security
• Malware
• Vulnerability

CVE-2024-30088 Under Attack: OilRig Targets Windows Kernel Vulnerability

Do Son December 24, 2024 0

Learn about OilRig, also known as APT34 or Helix Kitten, and its sophisticated cyber espionage activities in the Middle East.

Ignoble Scorpius Strikes Again: The Rise of BlackSuit Ransomware

• Cyber Security
• Malware

Ignoble Scorpius Strikes Again: The Rise of BlackSuit Ransomware

Do Son November 22, 2024 0

Discover the cybercrime group Ignoble Scorpius and their sophisticated ransomware campaign, BlackSuit, targeting industries worldwide.

North Korean Threat Group “Jumpy Pisces” Linked to Play Ransomware Attack

• Cyber Security
• Malware

North Korean Threat Group “Jumpy Pisces” Linked to Play Ransomware Attack

Do Son October 31, 2024 0

Discover the alarming collaboration between North Korean hackers and ransomware gangs. Learn how Jumpy Pisces is involved in a Play ransomware attack.

Supply Chain Weakness: Crypt Ghouls Exploit Contractors to Deploy Ransomware

• Cyber Security
• Malware

Supply Chain Weakness: Crypt Ghouls Exploit Contractors to Deploy Ransomware

Do Son October 20, 2024 0

Learn about Crypt Ghouls, a cybercriminal group behind ransomware attacks. Find out how they operate and how to defend against them.