ransomware Archives • Page 2 of 11 • Daily CyberSecurity

Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks Global distribution of IP addresses map

Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks

Do Son February 9, 2026

A massive, silent army of compromised devices has been uncovered by researchers, revealing a sprawling botnet that...

Everon OCPP Vulnerability CVE-2026-26288 ASUSTOR ADM Vulnerability CVE-2026-24936 PrismX MX100 Vulnerability Hard-Coded Credentials Advantech Vulnerability CVE-2025-52694 Eaton UPS Companion, CVE-2025-59887 ASUS Router, Authentication Bypass ASUSTOR DLL Hijacking, Privilege Escalation OpenShift AI, Privilege Escalation GoAnywhere vulnerability CVE-2025-10035 LangChainGo, template injection DeepDiff, class pollution ToolShell Sunshine, CSRF Vulnerability KACE SMA, Critical Vulnerabilities Oracle Zero-Days - PDQ Deploy vulnerability

CVE-2026-24936: Critical ASUSTOR Flaw (CVSS 9.5) Allows Remote System Takeover

Do Son February 4, 2026

A severe vulnerability has been discovered in ASUSTOR ADM (ASUSTOR Data Master), the operating system that powers...

Game Over: Interlock Ransomware Weaponizes Anti-Cheat Zero-Day to Kill EDR Interlock Ransomware Anti-Cheat BYOVD

Game Over: Interlock Ransomware Weaponizes Anti-Cheat Zero-Day to Kill EDR

Do Son February 4, 2026

A sophisticated ransomware group known as Interlock is turning the tables on defenders by weaponizing a tool...

Hidden in Plain Sight: TA584 Deploys “Tsundere Bot” & Invisible Registry Keys TA584 Tsundere Bot Invisible Registry Persistence

Hidden in Plain Sight: TA584 Deploys “Tsundere Bot” & Invisible Registry Keys

Do Son February 2, 2026

TA584, a sophisticated Initial Access Broker (IAB) known for paving the way for ransomware gangs, has dramatically...

GitHub & Dropbox Weaponized: “Defendnot” Tool Used to Disable Windows Defender Defendnot Abuse Multi-Stage Malware Campaign

GitHub & Dropbox Weaponized: “Defendnot” Tool Used to Disable Windows Defender

Do Son January 22, 2026

A sophisticated multi-stage malware campaign has been uncovered targeting users in Russia, blending social engineering with a...

Operation Covert Access: Rust RAT Infiltrates Argentina’s Judiciary WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware

Operation Covert Access: Rust RAT Infiltrates Argentina’s Judiciary

Do Son January 21, 2026

A highly sophisticated cyber-espionage campaign has been discovered targeting the heart of Argentina’s legal system. Dubbed “Operation...

DragonForce: The Rise of a New “Ransomware Cartel” Built on LockBit and Conti DNA INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach

INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach

DragonForce: The Rise of a New “Ransomware Cartel” Built on LockBit and Conti DNA

Do Son January 19, 2026

A comprehensive new analysis by security researchers at S2W details the inner workings of the DragonForce Ransomware...

DeadLock Ransomware: New Strain Hides C2 in Polygon Smart Contracts DeadLock Ransomware Polygon Smart Contracts

DeadLock Ransomware: New Strain Hides C2 in Polygon Smart Contracts

Do Son January 16, 2026

A new ransomware family is turning the decentralized dream of blockchain into a cybersecurity nightmare. Analysts at...

Spy, Steal, Lock: deVixor Android Trojan Hits Banking & Crypto Users deVixor Malware Android Banking Trojan

Spy, Steal, Lock: deVixor Android Trojan Hits Banking & Crypto Users

Do Son January 14, 2026

A sophisticated new threat has emerged in the mobile banking landscape, combining the stealth of a spy...

LockBit 5.0 Sustains Global Ransomware Dominance LockBit 5.0 Ransomware Ransomware-as-a-Service (RaaS)

LockBit 5.0 Sustains Global Ransomware Dominance

Do Son January 9, 2026

The hydra of the cybercrime world has grown another head. Since its emergence in late 2019, the...

CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare CrazyHunter Ransomware Healthcare Cyberattacks

CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare

Do Son January 8, 2026

A new, highly aggressive ransomware strain is cutting a swath through the healthcare sector, leaving hospitals and...

Cybersecurity Pros Admit to Moonlighting as BlackCat Ransomware Affiliates Elderly lottery fraud scam DOJ wire fraud conspiracy ALPHV BlackCat, Insider Threat Nefilim ransomware Artem Stryzhak guilty plea, Volodymyr Tymoshchuk $11M reward CoinDCX, Employee Arrest Operation PowerOFF Cybercrime, Self-Promotion Hacking

Elderly lottery fraud scam DOJ wire fraud conspiracy ALPHV BlackCat, Insider Threat Nefilim ransomware Artem Stryzhak guilty plea, Volodymyr Tymoshchuk $11M reward CoinDCX, Employee Arrest Operation PowerOFF Cybercrime, Self-Promotion Hacking

Cybersecurity Pros Admit to Moonlighting as BlackCat Ransomware Affiliates

Do Son December 31, 2025

Two cybersecurity professionals have admitted to moonlighting as ransomware affiliates, utilizing the very skills designed to protect...

A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBit Ransomware Cartel, Qilin-LockBit Alliance

A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBit

Do Son December 23, 2025

In a digital underworld increasingly fractured by law enforcement takedowns and eroding trust, three of the most...

The $100M Stalker: Nefilim Ransomware Affiliate Pleads Guilty as DOJ Hunts Fugitive Leader Elderly lottery fraud scam DOJ wire fraud conspiracy ALPHV BlackCat, Insider Threat Nefilim ransomware Artem Stryzhak guilty plea, Volodymyr Tymoshchuk $11M reward CoinDCX, Employee Arrest Operation PowerOFF Cybercrime, Self-Promotion Hacking

The $100M Stalker: Nefilim Ransomware Affiliate Pleads Guilty as DOJ Hunts Fugitive Leader

Do Son December 22, 2025

A Ukrainian national has admitted his role in the notorious Nefilim ransomware operation, confirming the inner workings...

Emerging Gentlemen Ransomware Hits 17 Countries with Double Extortion & BYOVD Evasion Tactics Gentlemen Ransomware, BYOVD Double Extortion

Emerging Gentlemen Ransomware Hits 17 Countries with Double Extortion & BYOVD Evasion Tactics

Do Son December 17, 2025

A sophisticated new ransomware operator has rapidly ascended the ranks of the cybercriminal underworld, targeting industries across...

GOLD SALEM Abuses Velociraptor DFIR Tool as Ransomware Precursor Following SharePoint ToolShell Exploitation AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

GOLD SALEM Abuses Velociraptor DFIR Tool as Ransomware Precursor Following SharePoint ToolShell Exploitation

Do Son December 15, 2025

A sophisticated cybercriminal group has been observed repurposing a legitimate digital forensics tool as a precursor for...

Storm-0249 Abuses EDR Process via DLL Sideloading to Cloak Ransomware Access Storm-0249 EDR Abuse, DLL Sideloading

Storm-0249 Abuses EDR Process via DLL Sideloading to Cloak Ransomware Access

Do Son December 15, 2025

A notorious initial access broker (IAB) known as “Storm-0249” has radically shifted its tactics, moving from broad...

New 01flip Ransomware Hits APAC Critical Infra: Cross-Platform Rust Weapon Uses Sliver C2 01flip Rust Ransomware, Cross-Platform APAC

New 01flip Ransomware Hits APAC Critical Infra: Cross-Platform Rust Weapon Uses Sliver C2

Do Son December 12, 2025

A new and sophisticated ransomware player has entered the cybercrime arena, targeting critical infrastructure in the Asia-Pacific...

Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR Shanya Crypter, EDR Killer

Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR

Do Son December 9, 2025

A sophisticated new “packer-as-a-service” has emerged from the cybercriminal underworld, providing ransomware gangs with a powerful toolkit...

LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption LockBit LockBit 5.0 Resurgence, ETW Blinding Ransomware

LockBit LockBit 5.0 Resurgence, ETW Blinding Ransomware

LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption

Do Son December 9, 2025

Just eighteen months ago, the cybersecurity world celebrated “Operation Cronos,” a massive law enforcement crackdown that promised...

Critical Alert 2 Active Exploits Detected Today