tsecurity.de - News Radar & Live Feeds

CISA, FBI and Partners Warn Organizations of SafePay Ransomware Actors Targeting Multiple Critical Infrastructure Sectors

Fri, 23 Oct 2026 22:31:35 +0200

This post has no text preview — click the link below to read the original article. This article has been indexed from CISA News Read the original article: CISA, FBI and Partners Warn Organizations of SafePay Ransomware Actors Targeting Multiple Critical Infrastructure Sectors The post CISA, FBI and Partners Warn Organizations of SafePay Ransomware... Weiterlesen

Phantom-Ransomware: KI-gestützte Intrusion über Open-Modelle und Proxy-C2

Fri, 23 Oct 2026 20:50:49 +0200

LONDON (IT BOLTWISE) – SOCRadar hat eine KI-gestützte Intrusions- und Daten-Extortion-Umgebung offengelegt, die mit dem Phantom-Framework arbeitet. Laut den Analysten soll ein menschlich freigegebener Prompt-Prozess die Angriffe steuern, während die Umsetzung über kommerzielle Modelle im OpenCode- und OpenRouter-Setup automatisiert wird. Die... Weiterlesen

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Fri, 23 Oct 2026 20:44:09 +0200

Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an "Autonomous Red Team Kill Chain Framework" referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an... Weiterlesen

Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

Fri, 23 Oct 2026 18:44:11 +0200

Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials… This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks The post Qilin and INC Exploit... Weiterlesen

Critical Exploits, Ransomware and Agentic AI Reshape Cyber Risk

Fri, 23 Oct 2026 17:45:42 +0200

Weekly summary of Cybersecurity Insider newsletters Weiterlesen

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

Fri, 23 Oct 2026 16:28:06 +0200

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe. The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware appeared first on SecurityWeek. Weiterlesen

SafePay Ransomware: Mindestens 600 Opfer [2026] - Tech Insider

Fri, 23 Oct 2026 15:33:50 +0200

SafePay-Ransomware: Mindestens 600 Opfer [2026]. Elias Virtanen; Oktober 23, 2026; Cybersicherheit · Elias ... Weiterlesen

FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations

Fri, 23 Oct 2026 15:33:42 +0200

SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the US Secret Service, Germany’s Landeskriminalamt Rheinland-Pfalz, and two UK law enforcement agencies jointly published an advisory this week on SafePay, a ransomware group they... Weiterlesen

PwC Allegedly Hit by Everest Ransomware Group, 590GB of Data Stolen

Fri, 23 Oct 2026 09:21:26 +0200

The Everest ransomware group has reportedly stolen around 590GB of data linked to PwC, one of the Big Four professional services firms. The claim concerns internal human resources and learning systems, but it remains unverified, as no independent reports have confirmed it. A post shared by Crypto India states that the alleged theft includes... Weiterlesen

PwC Allegedly Hit by Everest Ransomware Group, 590GB of Data Stolen

Fri, 23 Oct 2026 08:06:50 +0200

PwC Data Breach Claim – Everest Ransomware Group Claims to Have Stolen 590 GB of Data

Fri, 23 Oct 2026 08:06:50 +0200

The Everest ransomware group claims to have stolen 590.69 GB of data from PwC, the global professional services firm. This alleged data theft includes human resources records, training materials, and internal documents. However, the claims are unverified, and PwC has not yet responded. The group’s listing was reported on October 22, 2026.... Weiterlesen

Risky Bulletin: Supply chain attack lets ransomware group inside 40 shipping companies

Fri, 23 Oct 2026 07:08:44 +0200

A ransomware group used a supply chain compromise to hack around 40 shipping companies, the Pentagon assembles a technology sabotage unit, PHP2Shell exploitation gets underway and GoDaddy revokes 400,000 certs. This article has been indexed from Risky Bulletin Read the original article: Risky Bulletin: Supply chain attack lets ransomware group... Weiterlesen

Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site

Fri, 23 Oct 2026 01:13:14 +0200

On 30 September 2026, law enforcement took control of KillSec’s leak site, securing at least 110 terabytes of data against further unauthorised access. The cybercrime group used the site to threaten organisations with the publication of stolen files unless they paid a ransom. This article has been indexed from News Read the original article:... Weiterlesen

FBI Flags SafePay Ransomware as One of 2026’s Most Active Threats After 600 Victims

Thu, 22 Oct 2026 21:44:44 +0200

The FBI, alongside cybersecurity authorities in Germany and the United Kingdom, issued a joint advisory this week warning that a ransomware group called SafePay has compromised at least 600 organizations across the United States and Europe since it surfaced in late 2024, placing it among the most active extortion operations active right now. The... Weiterlesen

FBI, CISA Warn SafePay Ransomware Has Hit 600+ Victims

Thu, 22 Oct 2026 17:39:31 +0200

The FBI, CISA and international partners have issued a warning about SafePay ransomware, a group that has impacted at least 600 victims across multiple critical infrastructure sectors since August 2024. Published on October 20, 2026, the joint cybersecurity advisory describes SafePay as among the most active ransomware groups in 2026, with... Weiterlesen

Ransomware Gangs Exploit GlobalProtect VPN Flaw — What to Check

Thu, 22 Oct 2026 17:39:20 +0200

Ransomware groups exploit a GlobalProtect VPN vulnerability to reach enterprise systems. Here's what security teams should investigate. Weiterlesen

Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks

Thu, 22 Oct 2026 12:32:42 +0200

Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials… Weiterlesen

Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account

Thu, 22 Oct 2026 12:32:07 +0200

The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident This article has been indexed from www.infosecurity-magazine.com Read the original article: Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account The post Children’s Data Stolen After Ransomware... Weiterlesen

FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations

Thu, 22 Oct 2026 09:50:29 +0200

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Thu, 22 Oct 2026 07:13:42 +0200

Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by... Weiterlesen

FBI Warns SafePay Ransomware Has Hit 600+ Organizations: Here’s What We Know

Wed, 21 Oct 2026 22:19:18 +0200

FBI and CISA warn SafePay ransomware has hit at least 600 organizations. Learn how the group attacks networks and what security teams can do to prevent breaches. This article has been indexed from eSecurityPlanet Read the original article: FBI Warns SafePay Ransomware Has Hit 600+ Organizations: Here’s What We Know The post FBI Warns SafePay... Weiterlesen

Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death

Wed, 21 Oct 2026 22:19:10 +0200

A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang. Detectives have linked the man to the attack against blood-testing firm Synnovis, that disrupted London hospitals, and resulted in the death of a patient. Read more in my article on the Hot for Security blog. This article has... Weiterlesen

Hackers Use Gentlemen Ransomware to Disable Windows Defender and Destroy Backups

Wed, 21 Oct 2026 19:02:49 +0200

A ransomware operation known as The Gentlemen is using a mix of security tampering, service disruption and file encryption to make recovery harder for affected organizations. Its Windows malware can turn off Microsoft Defender’s real-time protection, add broad exclusions that reduce scanning, stop backup-related services and delete Volume Shadow... Weiterlesen

Gentlemen Ransomware Hackers Hijack Legitimate Lenovo Drivers to Disable Security Software

Wed, 21 Oct 2026 19:01:52 +0200

The Gentlemen ransomware operation is abusing legitimate Lenovo and Safetica kernel drivers to terminate security software, weakening endpoint defenses before encryption. Acronis Threat Research Unit researchers identified two custom dropper samples during a recent incident, exposing how the group weaponizes vulnerable drivers rather than relying... Weiterlesen

INC and The Gentlemen Ransomware Affiliates Expose 8,257 AI Messages

Wed, 21 Oct 2026 19:01:31 +0200

SOCRadar has found seven exposed servers linked to INC and The Gentlemen ransomware affiliates, holding AI chats, stolen… Weiterlesen

FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure

Wed, 21 Oct 2026 19:01:19 +0200

The group has been linked to a 2025 attack targeting technology firm Ingram Micro. Weiterlesen

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June

Wed, 21 Oct 2026 18:56:05 +0200

Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and energy. CVE-2026-0257 stems from the firewalls relying on cookies without performing detailed validation and... Weiterlesen

Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy

Wed, 21 Oct 2026 18:55:58 +0200

Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to outdo one another Weiterlesen

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

Wed, 21 Oct 2026 18:51:49 +0200

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. The post High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 appeared first on SecurityWeek. Weiterlesen

IBM Technology: The patching gap: Hacked fridges, AI ransomware and Mythos finds

Wed, 21 Oct 2026 13:12:38 +0200

YouTube Video

That melted ice cream might not be the freezer’s fault.

On episode 56 of Security Intelligence, Claire Nunez and MJ Vaidya join host Patrick Austin to break down three cybersecurity stories and what they mean for defenders.

First, attackers hijack refrigeration controllers from Danfoss, Copeland and Dixell at French supermarkets, pushing cases to 50°C. Team82 flagged the flaws and Danfoss shipped a fix, yet thousands of controllers remain exposed online. Is planned downtime the price of staying patched?

Then, a Semperis survey of 1,200 IT professionals links AI to 84% of ransomware attacks. Many of those attacks abuse companies’ own AI agents and identity systems. Should your agents be part of your insider threat model?

Finally, Bank of America brings on 1,000 contractors to patch vulnerabilities found by Anthropic’s Mythos and other AI security models. The panel debates whether AI can fix what it finds, and why patching can’t be a one-time push.

All that and more on Security Intelligence.

00:00 – Intro

01:00 – Hackers hijack supermarket fridges

10:11 – AI linked to 84% of ransomware attacks

19:31 – Bank of America hires 1,000 patchers

"The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. AI tools may be used to transcribe this episode and support selected stages of the production process. All AI-assisted content is reviewed by the production team before publication."

- Subscribe for Security updates → https://www.ibm.com/subscribe

- Learn more about artificial intelligence → https://www.ibm.com/think/topics/cybersecurity

- Visit Security Intelligence podcast page → https://www.ibm.com/think/podcasts/security-intelligence

- Watch the latest episode of Security Intelligence → https://www.ibm.com/think/podcasts/mixture-of-experts

---------------------------------------------------------------------------------------------------------
Find us on YouTube:
🔵 IBM Technology: https://www.youtube.com/@IBMTechnology
🔵 IBM: https://www.youtube.com/@IBM
🔵 IBM Developer: https://youtube.com/@ibmdeveloperadvocates

SafePay Ransomware Has Affected 600+ Organizations by Exploiting VPNs and Backup Servers

Wed, 21 Oct 2026 11:25:05 +0200

SafePay ransomware has affected at least 600 separate victims across multiple critical infrastructure sectors, according to a joint government advisory released on October 20, 2026. Active since August 2024, the group has targeted businesses and essential services across North America, South America, Europe, and Australia, becoming one of the most... Weiterlesen

Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account

Wed, 21 Oct 2026 11:23:03 +0200

The ICO has slammed security failings by the Welsh local government data unit and IT service provider following the 2024 incident Weiterlesen

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

Wed, 21 Oct 2026 11:22:18 +0200

The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. [...] Weiterlesen

INC Ransomware Hackers Use Claude AI, Expose 8,257 Messages and 46 Malware Builds

Wed, 21 Oct 2026 11:18:23 +0200

Ransomware affiliates associated with INC and The Gentlemen exposed an intrusion ecosystem after leaving operational servers publicly accessible. The investigation began in late September 2026 with open directories on 45.227.254[.]43. Configuration files and credentials led researchers to six additional adversary servers, exposing development... Weiterlesen

CISA Warns SafePay Ransomware Has Hit 600+ Organizations and Destroyed Backup Systems

Wed, 21 Oct 2026 11:18:23 +0200

CISA has warned that SafePay ransomware actors have compromised at least 600 organizations across multiple critical infrastructure sectors, combining data theft and encryption with deliberate attacks on backup systems to obstruct recovery. The October 20, 2026, joint advisory describes operations spanning North America, South America, Europe, and... Weiterlesen

Ransomware Hackers Use Claude AI to Plan Attacks Against 62 Organizations, Researchers Reveal

Wed, 21 Oct 2026 08:10:58 +0200

Ransomware operators used Claude and other commercial AI models to support attacks involving 62 organizations, according to research from SOCRadar Threat Research Unit (STRU). Exposed servers revealed how attackers combined AI planning, stolen credentials, custom malware and extortion tools within a shared operational environment. Researchers... Weiterlesen

INC Ransomware Hackers Use Claude AI, Expose 8,257 Messages and 46 Malware Builds

Wed, 21 Oct 2026 08:09:42 +0200

Security Weekly - A CRA Resource: Ransomware Negotiators Are Betraying Their Clients

Wed, 21 Oct 2026 01:33:50 +0200

YouTube Video

A ransomware negotiator pleaded guilty to sharing clients’ negotiating positions and insurance policy limits with the BlackCat ransomware group. Separately, MonsterCloud executive Zohar Pinachi was described in the supplied account as pleading not guilty to wire fraud allegations involving client billing and ransom payments.

Ransomware victims often depend on specialists to navigate high-pressure negotiations. If those specialists disclose confidential information or misrepresent how ransom payments are handled, clients may lose leverage and face additional financial exposure.

The cases must be evaluated individually. A guilty plea is different from an unresolved criminal allegation, and neither establishes a broader conspiracy by itself.

What independent checks should organizations require before trusting a third party to negotiate a ransomware incident?

Subscribe to our podcasts: https://securityweekly.com/subscribe

#Ransomware #CyberCrime #SecurityWeekly #Cybersecurity #InformationSecurity #AI #InfoSec

Building a Ransomware Detection System with Blockchain Logging

Tue, 20 Oct 2026 22:21:02 +0200

Developing Ransomware Detection System Using Blockchain Logging - My FYP Project Being a Computer Science student from COMSATS University Islamabad, I always wanted my final year project to address a practical issue. We thought of developing a system that detects ransomware as well as maintains the logs using blockchain. Here’s how I developed it.... Weiterlesen

Ransomware groups expand targeting of Palo Alto Networks vulnerability

Tue, 20 Oct 2026 22:11:56 +0200

Multiple threat actors have exploited a high-severity flaw in the company’s GlobalProtect portal. Weiterlesen

5 Ways American SOCs and MSSPs Can Stay Ahead of Ransomware Threats

Tue, 20 Oct 2026 22:11:56 +0200

Ransomware can disrupt business operations, expose sensitive data, and drive up recovery costs. American SOC and MSSP teams must identify threats early and respond quickly to prevent ransomware attacks from escalating and causing widespread damage. With growing alert volumes and increasingly sophisticated attacks, security departments need... Weiterlesen

Qilin- und INC-Ransomware missbrauchen CVE-2026-0257 für MFA-Bypass

Tue, 20 Oct 2026 22:11:53 +0200

LONDON (IT BOLTWISE) – Palo Alto Networks beobachtet weiter die Ausnutzung einer gepatchten Lücke in PAN-OS und Prisma Access. Das betroffene Problem CVE-2026-0257 mit CVSS 7,8 erlaubt laut Unit 42 den Bypass von Multi-Factor Authentication, um unautorisierte VPN-Sessions aufzubauen. Die Angreifer nutzen anschließend RDP und SMB für die laterale... Weiterlesen

Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June

Tue, 20 Oct 2026 22:11:38 +0200

Unit 42 investigates network compromises across numerous industries This article has been indexed from www.theregister.com – Articles Read the original article: Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June The post Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June... Weiterlesen

#StopRansomware: SafePay Ransomware

Tue, 20 Oct 2026 22:10:43 +0200

Advisory at a Glance Title #StopRansomware: SafePay Ransomware Original Publication October 20, 2026 Executive Summary This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America, South America, Europe, and... Weiterlesen

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Tue, 20 Oct 2026 22:03:33 +0200

Palo Alto's firewall OS has been under attack from multiple ransomware groups since June

Tue, 20 Oct 2026 22:01:46 +0200

Multiple ransomware groups, including Qilin and Inc, have been exploiting a high-severity authentication bypass bug in Palo Alto Networks' PAN-OS, with Unit 42 investigating attacks since early June across numerous industries, such as finance, healthcare, and manufacturing.CVE-2026-0257 affects PAN-OS GlobalProtect portals and gateways,... Weiterlesen

SME Cybersecurity: UK SME Ransomware Attack – What to Do in the First Hour

Tue, 20 Oct 2026 15:43:54 +0200

Image Credit: rawpixel viaFreepik Helping Keep Small Business CYBERSafe! Gibraltar: Tuesday 20 October 2026 at 07:00 CET SME Cybersecurity: UK SME Ransomware Attack – What to Do in the First Hour By: Iain Fraser – Cybersecurity Journalist Published in Collaboration with: Nord VPN Google Indexed on: CET | SERPS: LLM(AI) Google... Weiterlesen

Qilin and INC Ransomware Hackers Exploit Palo Alto Networks VPN Flaw to Breach Networks

Tue, 20 Oct 2026 15:42:08 +0200

Qilin and INC ransomware operators are exploiting CVE-2026-0257, an authentication-bypass vulnerability in Palo Alto Networks PAN-OS, to breach corporate networks via GlobalProtect VPN services. Unit 42’s October 19 update identifies the operators as Spikey Scorpius and Tarnished Scorpius, respectively, while separate public reporting links... Weiterlesen

Ransomware Gangs Use AI to Quickly Find and Steal the Most Sensitive Company Data

Tue, 20 Oct 2026 15:42:03 +0200

Ransomware operators are using generative AI to polish phishing lures, search compromised networks for valuable data, and churn out custom malware. Zscaler ThreatLabz says this shortens the window between initial access and extortion. The analysis appears in the company’s 2026 Ransomware Report and a related blog post. AI ransomware attacks Most... Weiterlesen

INC/Gentlemen Ransomware AI Infrastructure Exposed

Tue, 20 Oct 2026 15:40:27 +0200

SOCRadar researchers uncovered a sophisticated ransomware operation in late September 2026 after discovering an exposed command-and-control server that revealed the complete infrastructure of affiliates working with INC Ransomware and The Gentlemen Ransomware groups. This article has been indexed from CyberMaterial Read the original article:... Weiterlesen

Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death

Tue, 20 Oct 2026 15:33:45 +0200

Ransomware Gangs Use AI to Find and Steal the Most Sensitive Company Data Quickly

Tue, 20 Oct 2026 15:09:21 +0200

Ransomware operators are using generative AI to sharpen phishing campaigns, speed up reconnaissance, and identify sensitive corporate information to steal. Zscaler ThreatLabz describes a shift toward faster, more selective extortion, where attackers prioritize damaging disclosures rather than relying exclusively on file encryption. That represents... Weiterlesen

Hackers Exploit Palo Alto Networks PAN-OS Flaw to Bypass MFA and Deploy Ransomware

Tue, 20 Oct 2026 15:09:16 +0200

Ransomware operators are exploiting a vulnerability in Palo Alto Networks PAN-OS that allows them to bypass authentication. This issue enables unauthorized VPN sessions, bypasses multifactor authentication (MFA), and allows access to corporate networks. According to Unit 42’s October 19 update, two groups, Spikey Scorpius (also referred to as... Weiterlesen

FBI Suspects Ransomware Negotiator Helped Operate ShinyHunters Extortion Website

Tue, 20 Oct 2026 09:49:59 +0200

Federal investigators suspect an executive at a U.S. cybersecurity consulting firm helped operate ShinyHunters’ extortion website, raising concerns about potential collusion between cybercriminals and professionals hired to represent breach victims. According to an October 19 KrebsOnSecurity report, two sources close to the investigation said the... Weiterlesen

FBI Uncovers Suspected Links Between Ransomware Negotiators and ShinyHunters Hackers

Tue, 20 Oct 2026 09:47:51 +0200

Federal investigators examining the ShinyHunters group have uncovered potential connections between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity investigation published on October 19. Sources familiar with the inquiry revealed that an executive from an unnamed U.S. consulting company... Weiterlesen

FBI Uncovers Suspected Links Between Ransomware Negotiators and ShinyHunters Hackers

Tue, 20 Oct 2026 09:24:04 +0200

US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims

Mon, 19 Oct 2026 19:17:56 +0200

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More Read the original article: US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims The post... Weiterlesen

Ransomware pressure now reaches employees’ homes and families

Mon, 19 Oct 2026 07:12:47 +0200

Ransomware attackers threatened employees’ family members or friends at 37% of organizations surveyed for Semperis’ 2026 Ransomware Risk Report. The survey covered 1,200 IT and security professionals at organizations that had experienced at least one successful ransomware attack. “Ransomware has proven to be a great cash-generating activity for... Weiterlesen

Ransomware pressure now reaches employees’ homes and families

Mon, 19 Oct 2026 06:28:05 +0200

Krybit ransomware: what you need to know

Sun, 18 Oct 2026 14:23:06 +0200

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog. This article has been indexed from GRAHAM CLULEY Read the original article: Krybit ransomware:... Weiterlesen

Krybit ransomware: what you need to know

Sun, 18 Oct 2026 12:44:00 +0200

Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families

Sat, 17 Oct 2026 10:14:48 +0200

Guru Baran reports: Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware Risk Report, 37% of successful attacks included threats against workers’ friends or relatives. The findings show that ransomware... Weiterlesen

Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Access

Sat, 17 Oct 2026 01:02:43 +0200

Artificial Intelligence technologies have made a huge impact on the security industry. But as with any public technology, adversaries have access to AI as well. They’re wasting no time incorporating AI into their malicious workflows and ransomware operators have been able to leverage it – unfortunately, this has led to some of their... Weiterlesen

TechLinked: Ransomware recovery CEO caught paying off hackers

Fri, 16 Oct 2026 21:09:19 +0200

YouTube Video

When Your Ransomware Negotiator Works for the Other Side

Fri, 16 Oct 2026 17:30:09 +0200

The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight. Weiterlesen

Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments

Fri, 16 Oct 2026 15:48:50 +0200

New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments The post... Weiterlesen

Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments

Fri, 16 Oct 2026 15:42:52 +0200

New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments Weiterlesen

Ransomware, interrupted: Sodinokibi and the supply chain

Fri, 16 Oct 2026 05:56:03 +0200

Last month, the Elastic Security Protections Team prevented an attempted ransomware attack targeting an organization monitored by one of our customers, an IT Managed Service Provider (MSP). We analyzed the alerts that were generated after an adversary’s process injection attempts were prevented by Elastic Endpoint Security on several endpoints.... Weiterlesen

LUNA Ransomware Attack Pattern Analysis

Fri, 16 Oct 2026 05:56:02 +0200

Key Takeaways LUNA is ransomware that achieves cross-platform capabilities through its development in Rust The Windows capabilities are comparable to other ransomware peers The Linux capabilities, while functional, are less elegant than the Windows variant Preamble LUNA Ransomware, which Elastic tracks as REF5264, is a Rust-based ransomware first... Weiterlesen

CUBA Ransomware Campaign Analysis

Fri, 16 Oct 2026 05:56:02 +0200

Key Takeaways The Elastic Security Team is tracking an organized and financially-motivated ransomware and extortion group called Cuba Ransomware Cuba Ransomware targets small and medium-sized retailers, exfiltrating sensitive information, and then deploying ransomware Cuba Ransomware uses a “name and shame” approach by releasing exfiltrated data... Weiterlesen

Gunra Ransomware: Why Stopping Data Exfiltration Matters Before Encryption Begins

Fri, 16 Oct 2026 05:48:12 +0200

threat intelligence brief · gunra ransomware Sector Government · Critical Infrastructure · Healthcare · Financial Services Brief A joint advisory from the FBI, CISA, DC3, NSA, U.S. Secret Service and the Republic of Korea National Police Agency details an emerging ransomware-as-a-service operation built on double extortion. Business-critical data,... Weiterlesen

Medusa Ransomware: Why Rapid Exploitation and Data Theft Demand a Prevention-First Strategy

Fri, 16 Oct 2026 05:48:06 +0200

threat intelligence brief · medusa ransomware Sector Medical · Education · Legal · Insurance · Technology · Manufacturing Brief An updated joint advisory from CISA, the FBI, and HHS reports that Medusa has now impacted more than 500 victims across critical infrastructure sectors. Affiliates exploit exposed systems and ⟶ Weiterlesen

Inside DragonForce: How a Ransomware Cartel’s Payload Actually Runs

Fri, 16 Oct 2026 05:47:06 +0200

A technical walkthrough from runtime preparation and network-share discovery to concurrent file encryption DragonForce is a Ransomware-as-a-Service (RaaS) operation that first surfaced in mid-to-late 2023. It initially presented itself as a hacktivist collective before shifting to a profit-driven model. Early payloads were built on leaked LockBit... Weiterlesen

Japan on Cyberattack Alert as Ransomware Wave Hits Major Brands and Exposes Millions of Records

Thu, 15 Oct 2026 23:35:37 +0200

Audrey Liza M. Nolasco reports: Japan is confronting a mounting cybersecurity crisis, with a ransomware attack disrupting hundreds of organisations and a series of separate breaches putting millions of customer records at risk. One alarming detail: experts estimate that stolen Japanese driver’s licence images could be offered on dark-web markets... Weiterlesen

Healthcare Ransomware Attacks Doubled Since This Time Last Year

Thu, 15 Oct 2026 18:35:25 +0200

Healthcare saw an average of 3.33 attacks each day in Q3 2026. Weiterlesen

Hackerangriff auf Usedoms Seetelhotels – Ransomware legt IT-Systeme lahm

Thu, 15 Oct 2026 18:20:00 +0200

Die Seetelhotels auf Usedom sind Opfer eines Hacker-Angriffes geworden. © Sebastian Gollnow/dpa. Bei Google bevorzugen. Weiterlesen

Semperis-Bericht stellt fest, dass Hacker in den meisten Ransomware-Angriffen KI eingesetzt haben.

Thu, 15 Oct 2026 18:19:56 +0200

Hacker setzten bei den meisten Ransomware-Angriffen KI ein und bedrohten das Personal, fand. Credit: Canva Images. Semperis, ein Cyber-Resilienz- ... Weiterlesen

Hackers Use ClickFix and Python Tunnels to Prepare Systems for Ransomware Attacks

Thu, 15 Oct 2026 17:32:07 +0200

Hackers are using ClickFix tricks to install malware loaders and Python tunnels on Windows systems, creating access that could support ransomware attacks. A late September incident shows how a user running a command can start an infection chain built around trusted Microsoft programs, hidden code, and encrypted network traffic. The attack was... Weiterlesen

The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare

Thu, 15 Oct 2026 14:56:23 +0200

The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare In September 2026 the health-sector information sharing body Health-ISAC warned members about extortion activity carried out by ShinyHunters and clusters assessed to be associated with it. The message was specific: the campaigns combine voice phishing, credential... Weiterlesen

Ransomware extortion gets personal as attackers target employees’ families

Thu, 15 Oct 2026 14:34:44 +0200

Ransomware attackers are expanding their tactics beyond encrypting corporate systems and threatening to leak stolen data. They are increasingly using AI in attacks, exploiting organizations’ own AI systems and even using physical intimidation by threatening employees and their families to pressure companies into paying ransoms. The Semperis’ 2026... Weiterlesen

Ransomware gets personal: ‘We-know-where-you-are kind of stuff’

Thu, 15 Oct 2026 14:33:41 +0200

37% of ransomware attacks involve psychological or physical threats, global survey found This article has been indexed from www.theregister.com – Articles Read the original article: Ransomware gets personal: ‘We-know-where-you-are kind of stuff’ The post Ransomware gets personal: ‘We-know-where-you-are kind of stuff’ appeared first on IT Security... Weiterlesen

Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families

Thu, 15 Oct 2026 12:34:55 +0200

Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware Risk Report, 37% of successful attacks included threats against workers’ friends or relatives. The findings show that ransomware is no longer only a... Weiterlesen

AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire.

Thu, 15 Oct 2026 11:37:57 +0200

Artificial intelligence appeared in ransomware incidents affecting 84% of surveyed victims, while 87% reported attacks targeting or exploiting identity infrastructure. The findings connect accelerated criminal operations with weaknesses in the systems governing enterprise access. The study surveyed 1,200 IT and security professionals across nine... Weiterlesen

Ransomware-Angriffe: Täter setzen Opfer zunehmend persönlich unter Druck

Thu, 15 Oct 2026 11:31:34 +0200

Ransomware-Angreifer beschränken sich zunehmend nicht mehr auf die Verschlüsselung von Unternehmensdaten und Lösegeldforderungen. Laut dem Ransomware Risk Report 2026 von Semperis drohen sie Betroffenen und ihren Familien immer häufiger mit psychischer Einschüchterung und körperlicher Gewalt. In Deutschland berichteten 24 Prozent der befragten... Weiterlesen

87% of Ransomware Attacks Target Active Directory, Entra ID and Okta

Thu, 15 Oct 2026 10:29:56 +0200

Ransomware attackers targeted or exploited identity systems such as Active Directory, Entra ID, and Okta in 87% of cases covered by the Semperis 2026 Ransomware Risk Report. Despite this exposure, only half of surveyed organizations maintained dedicated identity backups, leaving major gaps in their ability to recover securely. The study, conducted... Weiterlesen

Security Weekly - A CRA Resource: Ransomware Access Is Cheap. Control Isn't

Thu, 15 Oct 2026 09:33:50 +0200

YouTube Video

Reported ransomware payments fell in 2025, while claimed victims increased and median payments rose. Meanwhile, the reported average price for buying access to a victim dropped sharply compared with 2023.

Falling access prices can lower the barrier to entry for attackers, but not all access is equal. Initial access does not automatically provide the privileges needed to control critical systems or disrupt an entire enterprise. Identity controls, segmentation, monitoring, and restricted privileges help limit what an attacker can do after gaining entry.

The key distinction is between getting inside and gaining meaningful control.

If an attacker obtained an initial foothold in your environment today, how much of your business could they actually reach?

Subscribe to our podcasts: https://securityweekly.com/subscribe

#Ransomware #ThreatIntelligence #SecurityWeekly #Cybersecurity #InformationSecurity #AI #InfoSec

Ransomware Attacks Have Swept Japan. A.I. May Be Making Them Easier.

Thu, 15 Oct 2026 09:30:12 +0200

Critical infrastructure has been targeted in a wave of cyberattacks, which experts say are rising because of artificial intelligence. Weiterlesen

Ransomware Attacks Target Identity Systems as AI Exploitation and Personal Threats Escalate

Thu, 15 Oct 2026 09:28:47 +0200

Ransomware operators are combining identity infrastructure attacks, artificial intelligence exploitation, and personal intimidation to pressure victims. According to Semperis, Among surveyed organizations that experienced successful ransomware attacks, 87% reported attackers targeting identity systems, while the report classified 84% as... Weiterlesen

Cyberkriminalität: Mutmaßlicher Ransomware-Entwickler in Japan festgenommen

Thu, 15 Oct 2026 09:27:51 +0200

Festnahme und Auslieferung Verdächtiger: Der 28-jährige Russe Vladimir K. (Deckname „snake“), mutmaßlicher Kernentwickler der Erpressungssoftware-Bande Qilin (ehemals Agenda), sitzt in Deutschland in Untersuchungshaft. Zugriff in Japan: Japanische Sicherheitskräfte nahmen K. am 26. Mai 2026 während eines Urlaubs in Osaka fest. Die Auslieferung... Weiterlesen

Prominent Ransomware Negotiator Faces Extortion Charges

Thu, 15 Oct 2026 09:22:41 +0200

Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money. Weiterlesen

Ransomware Gangs Embrace Physical Threats, Family Stalking?

Thu, 15 Oct 2026 09:22:40 +0200

Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify. Weiterlesen

Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference

Thu, 15 Oct 2026 09:22:16 +0200

A ransomware negotiator attended a cybersecurity conference, only to be arrested by the FBI in connection with its investigation into the ShinyHunters gang. Meanwhile, hackers get the keys to ASOS's app and the chance to message every single customer. What did they say? And how did the company respond? We have thoughts. All this and more is... Weiterlesen

Ransomware gets personal: 'We-know-where-you-are kind of stuff'

Thu, 15 Oct 2026 09:12:27 +0200

Tim Beasley, a senior incident response consultant at Semperis, was investigating a cyberattack involving Russia’s Midnight Blizzard when a package containing nesting dolls and other regional gifts showed up on his doorstep. At the time, Beasley served as the lead investigator for Microsoft’s Detection and Response Team (DART). He assumed it was... Weiterlesen

Ransomware Gangs Threaten Employees’ Families as AI-Powered Attacks Escalate

Thu, 15 Oct 2026 08:56:08 +0200

Ransomware operators are extending their extortion tactics beyond corporate networks by threatening employees’ families and using artificial intelligence to enhance their attacks, according to the Semperis 2026 Ransomware Risk Report. Among the surveyed victims, 37% reported threats against their family members or friends, while 84% experienced... Weiterlesen

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

Mon, 12 Oct 2026 22:06:54 +0200

2026-10-01 • Bleeping Computer • Lawrence Abrams Open article on Malpedia Weiterlesen

Warlock Ransomware Attackers Hit Water and Telecom Operators

Mon, 12 Oct 2026 22:06:53 +0200

2026-10-01 • Symantec • Threat Hunter Team • win.warlock • Storm-2603 Open article on Malpedia Weiterlesen

Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack

Mon, 12 Oct 2026 22:06:51 +0200

2026-10-06 • Huntress Labs • Harlan Carvey, Lindsey O'Donnell-Welch • elf.akira, win.akira Open article on Malpedia Weiterlesen

IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime

Mon, 12 Oct 2026 21:46:47 +0200

Editor’s note: This research was conducted by Himanshu Anand, an independent cybersecurity researcher (follow Himanshu on X). During Cybersecurity Awareness Month, ransomware remains one of the clearest examples of how a cyber incident can become a business continuity issue. IronChain shows why. It puts business-critical data at risk of permanent... Weiterlesen

Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions

Mon, 12 Oct 2026 21:46:28 +0200

Authorities accuse the owner of a so-called ransomware remediation company of swindling clients victimized by ransomware attacks into paying the company inflated fees under false pretenses. Zohar Pinhasi, owner and operator of MonsterCloud, claimed he could decrypt and recover victims’ data with specialized, proprietary tools and avoid paying... Weiterlesen

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

Mon, 12 Oct 2026 21:43:45 +0200

Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and threatening to publish it on its leak site unless they paid. The 16-year-old was one of 3 people arrested on September 30, when police also took control of that site.... Weiterlesen

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

Mon, 12 Oct 2026 21:43:43 +0200

Ravie LakshmananOct 03, 2026Vulnerability / Critical Infrastructure The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and... Weiterlesen

No EDR, no problem: how Huntress rebuilt an Akira ransomware attack from forensic leftovers

Mon, 12 Oct 2026 21:43:04 +0200

Incident responders rarely get to watch an attack from the beginning. More often, security tooling arrives after the damage is done, either as part of the response or because a rollout was still underway when the attackers struck. That was the position Huntress found itself in this September, when its agent was deployed at an organisation that had... Weiterlesen

Global cyber attacks up 48% as ransomware and phishing climb, Check Point finds

Mon, 12 Oct 2026 21:43:02 +0200

Organisations worldwide faced an average of 2,803 cyber attacks per week in September 2026, up 16% on August and 48% on the same month last year, according to new data from Check Point Research. The figures point to sustained growth rather than a one-off spike. Weekly attacks per organisation have climbed 36% in five months, from 2,055 in May. UK... Weiterlesen

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

Mon, 12 Oct 2026 21:42:53 +0200

FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI jobs… Weiterlesen

FBI nimmt kanadischen Ransomware-Vermittler fest – Anklage wegen Erpressung

Mon, 12 Oct 2026 21:42:20 +0200

WASHINGTON / LONDON (IT BOLTWISE) – Ein kanadischer Ransomware-Vermittler ist festgenommen worden; laut Gerichtsunterlagen steht er unter anderem wegen geplanter Erpressungsvorwürfe vor Gericht. Die Ermittlungen laufen parallel zu einer globalen Durchsetzung gegen die Hacking-Gruppe ShinyHunters. Im Kern geht es darum, wie Informationen über Opfer... Weiterlesen

Mississippi City Discloses Ransomware Incident

Mon, 12 Oct 2026 21:40:02 +0200

Vicksburg, Mississippi, had computer systems temporarily shut down due to a cyberattack. Weiterlesen

Did MoneyGram Get Hacked? Ransomware Gang Claims It Did

Mon, 12 Oct 2026 21:39:43 +0200

Cybercriminals claimed a breach, but no samples have been shared. Weiterlesen

Medusa Ransomware: Why Rapid Exploitation and Data Theft Demand a Prevention-First Strategy

Mon, 12 Oct 2026 21:32:59 +0200

The State of Ransomware: September 2026

Mon, 12 Oct 2026 21:32:59 +0200

BlackFog's state of ransomware August 2026 measures publicly disclosed and non-disclosed attacks globally. Weiterlesen

Police Target KillSec Ransomware Group with Arrests and Seizures

Mon, 12 Oct 2026 21:28:49 +0200

Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects Weiterlesen

Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds

Mon, 12 Oct 2026 21:28:42 +0200

An affiliate of The Gentlemen RaaS group ran a parallel leak site during extortion of two dozen victims Weiterlesen

Q3 2026 Sets New Record for Ransomware Attacks

Mon, 12 Oct 2026 21:27:56 +0200

Comparitech observed 2627 claimed ransomware attacks in Q3, with critical sectors like finance, technology, education and healthcare experiencing significant increases Weiterlesen

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

Mon, 12 Oct 2026 21:27:43 +0200

ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May Weiterlesen

Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings

Mon, 12 Oct 2026 21:27:39 +0200

Leaked documents suggest a multi-pronged operation, with social engineering and more technical attackers working together to manipulate a single target Weiterlesen

Alleged KillSec Ransomware Mastermind a 16-Year-Old

Mon, 12 Oct 2026 21:24:36 +0200

Law enforcement from multiple countries collaborated to disrupt a cybercrime operation that has claimed some 500 victims worldwide in the past two years. Weiterlesen

FBI Arrests Executive at Ransomware Negotiation Firm

Mon, 12 Oct 2026 21:23:41 +0200

Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. The New York Times reported today that the... Weiterlesen

16-year-old boy arrested for masterminding KillSec ransomware group

Mon, 12 Oct 2026 21:23:09 +0200

Three people, including a 16-year-old boy, have been arrested for alleged involvement in the KillSec ransomware operation.Law enforcement bodies from several countries, led by the Hamburg State Criminal Police Office and the Hamburg Public Prosecutor's Office, raided eight properties in Spain, Greece, the UK, and Romania. Digital infrastructure,... Weiterlesen

Two groups account for a third of UK ransomware attacks

Mon, 12 Oct 2026 21:21:26 +0200

The number of ransomware attacks in the UK is rising fast, with two groups in particular identified as the main culprits.New data from Cohesity has revealed that UK attacks are up 60% quarter-on-quarter and 42% year-on-year. And despite the rising numbers of hackers entering the market, just two hacking groups were behind nearly a third – 32% – of... Weiterlesen

N0n ransomware: what you need to know

Mon, 12 Oct 2026 21:20:06 +0200

N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog. Weiterlesen

Germany arrests alleged core Qilin ransomware member after extradition

Mon, 12 Oct 2026 20:55:23 +0200

Germany has arrested a Russian national suspected of being a leading member of the Qilin ransomware group following extradition from Japan earlier this month. [...] Weiterlesen

Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead

Mon, 12 Oct 2026 20:53:33 +0200

The United States Department of Justice has charged a man with fraud after he allegedly told clients he could decrypt files locked up by ransomware but actually paid ransoms – and seemingly got away with it for years. The Feds allege that Zohar Pinhasi – aka “Zack Silver” and “Zack Green” – ran a Florida company called “MonsterCloud” that advised... Weiterlesen

Cheapskates wouldn't pay for security help, got hit by ransomware, and went bust months later

Mon, 12 Oct 2026 20:53:33 +0200

Welcome back to PWNED, the weekly column where we highlight some of the lowlights in corporate security. This week, we’ll talk about two scenarios, one that ended in tragedy and another that shows the power of a good defense over dedicated phishing attacks. Have a story about someone leaving a gaping hole in their network? Share it with us at... Weiterlesen

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

Mon, 12 Oct 2026 20:53:26 +0200

The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference. The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on SecurityWeek. Weiterlesen

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

Mon, 12 Oct 2026 20:40:50 +0200

The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete with tools and traces of an intrusion. Apparently, keeping things secure is a problem on both sides of the fence. The rest of the week isn't much more reassuring. Malicious code... Weiterlesen

Ransomware: Qilin-Hacker nach Deutschland ausgeliefert

Mon, 12 Oct 2026 20:40:42 +0200

Ein mutmaßliches Mitglied der Hackergruppe Qilin ist an Deutschland überstellt worden. Dem Russen wird ein Angriff auf ein deutsches Logistikunternehmen vorgeworfen. (Ransomware, Security) Weiterlesen

Angeklagter zahlte heimlich Lösegeld: Ransomware-Entschlüsselungsdienst vor Gericht

Mon, 12 Oct 2026 20:40:41 +0200

Von Ransomware-Angriffen betroffenen Firmen versprach der Angeklagte, über fortschrittliche Entschlüsselungstechniken zu verfügen. (Cybercrime, Verschlüsselung) Weiterlesen

Fraudster who targeted ransomware victims appears in US court

Mon, 12 Oct 2026 20:08:00 +0200

Zohar Pinhasi stands accused of duping distressed ransomware victims by profiting from fake cyber services that he could not provide Weiterlesen

heise-Angebot: KI-Agenten, NIS2, Ransomware: Das bietet der ICC Summit 2026

Mon, 12 Oct 2026 18:51:53 +0200

Wie Identitäten zum Kern der Cybersecurity werden, zeigt der ICC Summit am 26. November 2026 in München. Jetzt steht das Konferenz-Programm. Weiterlesen

Ransomware consultant said he would decrypt data, is accused of paying ransoms instead

Mon, 12 Oct 2026 17:38:25 +0200

The owner of a ransomware remediation company is facing trial for defrauding customers. Zohar Pinhasi, also known as “Zack Silver” and “Zack Green,” has been arraigned in New York on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud. Pinhasi falsely claimed he could recover documents encrypted... Weiterlesen