A zero-day privilege escalation vulnerability (CVE-2025-29824) in Microsoft CLFS was exploited by Balloonfly (Play ransomware) before the official patch.
Play Ransomware
Explore the findings on BitLaunch hosting provider and its potential links to ransomware activities in the cybercrime ecosystem.
Learn about the collaboration of Play ransomware with the Andariel group. Explore the tactics used in this sophisticated cyber attack.
Discover the alarming collaboration between North Korean hackers and ransomware gangs. Learn how Jumpy Pisces is involved in a Play ransomware attack.
Carbanak malware, previously utilized for stealing banking data, is now employed by the cybercriminal group FIN7 for remote control
The Play ransomware group has developed two custom tools to infiltrate compromised networks, enumerate users and computers