Tag: ransomware
-
Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
A Ukrainian man who carried out ransomware attacks for both the Nefilim and Hive gangs, including attacks on law firms and a healthcare provider during the COVID-19 pandemic, has been sentenced to 70 months in a US prison. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/hive-ransomware-jailed-fbi-infiltrated
-
Japan’s GMO Internet Urges Customers to Disconnect PCs
GMO Internet has told customers to unplug their PCs in advance of a possible ransomware attack First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/japan-gmo-internet-disconnect/
-
Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator
A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/28/doj-ukrainian-ransomware-hacker-sentenced/
-
Nefilim and Hive ransomware affiliate gets 70 months in prison
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/nefilim-and-hive-ransomware-affiliate-gets-70-months-in-prison/
-
Japan’s GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company’s Onamae Desktop Cloud threatened to launch a ransomware attack today. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japans-gmo-urges-customers-to-shut-down-pcs-amid-ransomware-threat/
-
Japan’s GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company’s Onamae Desktop Cloud threatened to launch a ransomware attack today. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japans-gmo-urges-customers-to-shut-down-pcs-amid-ransomware-threat/
-
Japan’s GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company’s Onamae Desktop Cloud threatened to launch a ransomware attack today. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japans-gmo-urges-customers-to-shut-down-pcs-amid-ransomware-threat/
-
Japan’s GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company’s Onamae Desktop Cloud threatened to launch a ransomware attack today. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japans-gmo-urges-customers-to-shut-down-pcs-amid-ransomware-threat/
-
UNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/unm-health-ransomware-attack-disrupts-patient-care-surgeries/
-
Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups. First seen on therecord.media Jump to article: therecord.media/nefilim-hive-ransomware-operator-70-months-prison
-
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
Artem Stryzhak participated in a series of ransomware attacks on hospitals, government entities and law firms from the middle of 2018 to late 2021. First seen on cyberscoop.com Jump to article: cyberscoop.com/nefilim-hive-ransomware-affiliate-artem-stryzhak-sentenced/
-
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
The University of New Mexico is working to restore systems following the incident, which has been claimed by the BYOD ransomware group First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cyber-unmhealth-surgeries/
-
What happens when security tools go dark before the ransomware
A China-linked ransomware crew disabled the security tools at a critical infrastructure operator before it launched the encryptor. Most security budgets never priced that in. First seen on cyberscoop.com Jump to article: cyberscoop.com/warlock-ransomware-storm-2603-sharepoint-attacks-op-ed/
-
CISA 2030: Analysts Question Agency’s Ability to Deliver
Agency Vows ‘Aggressive, Anticipatory’ Stance After Losing a Third of Its StaffThe U.S.. Cybersecurity and Infrastructure Security Agency’s new CISA 2030 strategy vows to take an aggressive, anticipatory stance against adversaries – but analysts say it ignores ransomware payments, liability and the deep staffing cuts that could keep it from delivering. First seen on govinfosecurity.com…
-
PwC confirms learning records breached in attack on vendor site
The professional services firm was the subject of a claim by a known ransomware actor. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/pwc-learning-records-breached-attack-vendor/856902/
-
12 Ransomware Recovery Solutions: The 2026 Buyer’s Verdict Guide
Ransomware recovery is measured on the worst Tuesday: how fast you find the clean point, prove it’s clean, and rebuild at scale without reinfecting yourself. The twelve solutions in this verdict guide attack those minutes differently intelligence platforms, journal-rewind engines, SaaS-protected coverage, vaulted copies, array-speed restores, and the hardening appliances underneath and buying well means…
-
11 Backup Recovery Solutions: The 2026 Buyer’s Verdict Guide
Ransomware rewrote backup’s job description attackers delete recovery points before encrypting production so 2026’s buying criteria are security properties: immutability stolen credentials can’t untick, isolation from your blast radius, and restores proven by stopwatch rather than dashboard. One roster note: our sheet listed Cohesity and Veritas separately, but their completed merger makes them one vendor…
-
Cybersicher Lagebild 2026 – Ransomware und KI-Phishing setzen den Mittelstand unter Druck
First seen on security-insider.de Jump to article: www.security-insider.de/ransomware-ki-phishing-lagebild-2026-deutsche-kmu-a-18afbccde602f57f6f1a259930cb79f9/
-
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Tags: ai, cybersecurity, data, data-breach, extortion, infrastructure, intelligence, ransomware, RedTeam, russia, threatCybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups.Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as well…
-
Forescout deckt neue ClickFix-Angriffsketten und Malware-Plattform ROMULUS auf
Forescout enthüllt neue ClickFix-Angriffe: Malware-Loader, ROMULUS und raffinierte Tarnmechanismen machen den Weg für Ransomware frei. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/forescout-deckt-neue-clickfix-angriffsketten-und-malware-plattform-romulus-auf/a46900/
-
PwC Allegedly Hit by Everest Ransomware Group, 590GB of Data Stolen
The Everest ransomware group has reportedly stolen around 590GB of data linked to PwC, one of the Big Four professional services firms. The claim concerns internal human resources and learning systems, but it remains unverified, as no independent reports have confirmed it. A post shared by Crypto India states that the alleged theft includes 108,426…
-
Cybercrime crackdown across Africa leads to 1,462 arrests, $105 million seized
More than 1,400 suspected cybercriminals were arrested across Africa this summer as part of a crackdown on the gangs perpetrating online fraud, ransomware and business email compromise attacks, Interpol said. First seen on therecord.media Jump to article: therecord.media/africa-cybercrime-interpol-arrests
-
New ScarlettGroup Extortion Gang Threatens to Leak Company Data Using Dark Web Countdown Timers
An emerging cyber-extortion operation named ScarlettGroup is using a Tor-based leak site and public countdown timers to pressure organizations over allegedly compromised data. Threat-monitoring records described in Foresiet’s research place its emergence around September 2026, with visibility increasing during October as alleged victim listings and underground forum activity attracted attention. Unlike conventional ransomware campaigns, ScarlettGroup’s…
-
Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
Qilin and INC ransomware operators exploit a PAN-OS vulnerability (CVE-2026-0257) to gain VPN access, then steal domain credentials… First seen on hackread.com Jump to article: hackread.com/qilin-inc-exploit-palo-alto-vpn-flaw-ransomware-attacks/
-
Ransomware-Recovery – Wenn Backups die Schwachstellen wiederherstellen
First seen on security-insider.de Jump to article: www.security-insider.de/ransomware-recovery-identity-governance-backup-risiko-a-40ff7d926c375f0bbb11660fdcbea9ae/
-
Authorities disrupt nearly 11,000 cybercrime networks in Africa
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/authorities-disrupt-nearly-11-000-cybercrime-networks-in-africa/