Latest Ransomware news

Kasseika ransomware uses antivirus driver to kill other antiviruses

A recently uncovered ransomware operation named 'Kasseika' has joined the club of threat actors that employs Bring Your Own Vulnerable Driver (BYOVD) tactics to disable antivirus software before encrypting files.
- Bill Toulas
- January 23, 2024
- 02:58 PM
- 0
loanDepot cyberattack causes data breach for 16.6 million people

Mortgage lender loanDepot says that approximately 16.6 million people had their personal information stolen in a ransomware attack disclosed earlier this month.
- Sergiu Gatlan
- January 22, 2024
- 10:59 AM
- 2
Tietoevry ransomware attack causes outages for Swedish firms, cities

Finnish IT services and enterprise cloud hosting provider Tietoevry has suffered an Akira ransomware attack impacting cloud hosting customers in one of its data centers in Sweden.
- Lawrence Abrams
- January 21, 2024
- 03:13 PM
- 0
Researchers link 3AM ransomware to Conti, Royal cybercrime gangs

Security researchers analyzing the activity of the recently emerged 3AM ransomware operation uncovered close connections with infamous groups, such as the Conti syndicate and the Royal ransomware gang.
- Ionut Ilascu
- January 20, 2024
- 10:09 AM
- 0
Vans, North Face owner says ransomware breach affects 35 million people

VF Corporation, the company behind brands like Vans, Timberland, The North Face, Dickies, and Supreme, said that more than 35 million customers had their personal information stolen in a December ransomware attack.
- Sergiu Gatlan
- January 19, 2024
- 09:35 AM
- 0
TeamViewer abused to breach networks in new ransomware attacks

Ransomware actors are again using TeamViewer to gain initial access to organization endpoints and attempt to deploy encryptors based on the leaked LockBit ransomware builder.
- Bill Toulas
- January 18, 2024
- 04:07 PM
- 4
Majorca city Calvià extorted for $11M in ransomware attack

The Calvià City Council in Majorca announced it was targeted by a ransomware attack on Saturday, which impacted municipal services.
- Bill Toulas
- January 16, 2024
- 01:45 PM
- 0
The Week in Ransomware - January 12th 2024 - Targeting homeowners' data

Mortgage lenders and related companies are becoming popular targets of ransomware gangs, with four companies in this sector recently attacked.
- Lawrence Abrams
- January 12, 2024
- 05:06 PM
- 1
Finland warns of Akira ransomware wiping NAS and tape backup devices

The Finish National Cybersecurity Center (NCSC-FI) is informing of increased Akira ransomware activity in December, targeting companies in the country and wiping backups.
- Bill Toulas
- January 11, 2024
- 10:01 AM
- 0
Fidelity National Financial: Hackers stole data of 1.3 million people

Fidelity National Financial (FNF) has confirmed that a November cyberattack (claimed by the BlackCat ransomware gang) has exposed the data of 1.3 million customers.
- Bill Toulas
- January 10, 2024
- 03:32 PM
- 0
Ransomware victims targeted by fake hack-back offers

Some organizations victimized by the Royal and Akira ransomware gangs have been targeted by a threat actor posing as a security researcher who promised to hack back the original attacker and delete stolen victim data.
- Bill Toulas
- January 09, 2024
- 04:09 PM
- 0
Hackers target Microsoft SQL servers in Mimic ransomware attacks

A group of financially motivated Turkish hackers targets Microsoft SQL (MSSQL) servers worldwide to encrypt the victims' files with Mimic (N3ww4v3) ransomware.
- Sergiu Gatlan
- January 09, 2024
- 01:50 PM
- 0
Decryptor for Babuk ransomware variant released after hacker arrested

Researchers from Cisco Talos working with the Dutch police obtained a decryption tool for the Tortilla variant of Babuk ransomware and shared intelligence that led to the arrest of the ransomware's operator.
- Bill Toulas
- January 09, 2024
- 11:46 AM
- 0
Paraguay warns of Black Hunt ransomware attacks after Tigo Business breach

The Paraguay military is warning of Black Hunt ransomware attacks after Tigo Business suffered a cyberattack last week impacting cloud and hosting services in the company's business division.
- Lawrence Abrams
- January 09, 2024
- 11:28 AM
- 0
Toronto Zoo: Ransomware attack had no impact on animal wellbeing

Toronto Zoo, the largest zoo in Canada, says that a ransomware attack that hit its systems on early Friday had no impact on the animals, its website, or its day-to-day operations.
- Sergiu Gatlan
- January 08, 2024
- 05:16 PM
- 0
US mortgage lender loanDepot confirms ransomware attack

Leading U.S. mortgage lender loanDepot confirmed today that a cyber incident disclosed over the weekend was a ransomware attack that led to data encryption.
- Sergiu Gatlan
- January 08, 2024
- 12:39 PM
- 0
Capital Health attack claimed by LockBit ransomware, risk of data leak

The Lockbit ransomware operation has claimed responsibility for a November 2023 cyberattack on the Capital Health hospital network and threatens to leak stolen data and negotiation chats by tomorrow.
- Bill Toulas
- January 08, 2024
- 10:53 AM
- 0
Sponsored Content
Securing helpdesks from hackers: What we can learn from the MGM breach

In the wake of the MGM Resorts service desk hack, it's clear that organizations need to rethink their approach to securing their help desks. Learn more from Specops Software on how to prevent such incidents.
- Sponsored by Specops Software
- January 08, 2024
- 10:02 AM
- 0
The Week in Ransomware - January 5th 2024 - Secret decryptors

With it being the first week of the New Year and some still away on vacation, it has been slow with ransomware news, attacks, and new information.
- Lawrence Abrams
- January 05, 2024
- 05:16 PM
- 0
Zeppelin ransomware source code sold for $500 on hacking forum

A threat actor announced on a cybercrime forum that they sold the source code and a cracked version of the Zeppelin ransomware builder for just $500.
- Bill Toulas
- January 04, 2024
- 11:16 AM
- 0