Tag: ransomware
-
Mississippi mayor says ransomware incident led city to shut down systems
Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are investigating. First seen on therecord.media Jump to article: therecord.media/vicksburg-mississippi-government-ransomware-attack
-
‘Warlock’ ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team. First seen on therecord.media Jump to article: therecord.media/warlock-ransomware-used-in-critical-infrastructure-attacks
-
Police Target KillSec Ransomware Group with Arrests and Seizures
Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/police-target-killsec-ransomware/
-
16-Year-Old Suspected KillSec Ransomware Leader Arrested in International Operation
International law enforcement authorities have arrested three suspects linked to the KillSec ransomware group, including a 16-year-old who is alleged to be the operation’s administrator and primary operator. This coordinated action, announced on October 1, involved agencies from nine countries and was supported by Eurojust and Europol. KillSec Ransomware Leader Arrested KillSec, which has been…
-
Teen hacker arrested amid KillSec cyber gang takedown
A multinational operation targeting the KillSec ransomware gang has led to three arrests, including an unnamed 16 year-old. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651338/Teen-hacker-arrested-amid-KillSec-cyber-gang-takedown
-
Alleged KillSec Ransomware Mastermind a 16-Year-Old
Law enforcement from multiple countries collaborated to disrupt a cybercrime operation that has claimed some 500 victims worldwide in the past two years. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/killsec-ransomware-mastermind-16-year-old
-
Spain Arrests Teen Suspected of Running KillSec Ransomware
3 Arrested as Police Seize Leak Site and US Charges Dutch Suspect. Spanish police arrested a 16-year-old suspected of running the KillSec ransomware group as authorities seized its servers and leak site, while U.S. prosecutors charged a Dutch national accused of helping the group extort victims, including a Puerto Rico company. First seen on govinfosecurity.com…
-
Breach Roundup: Cisco SD-WAN Flaw Under Attack
OpenAI Agents Target Canada, ShinyHunters Suspect Arrested. This week: Cisco SD-WAN, OpenAI agents target Canada, ShinyHunters suspect arrested in Amsterdam, Japanese railway ransomware, AI labs investigated, an accused Chinese hacker misses his cellphone. Russian hackers, an ATM jackpotting network sanctioned and former airmen sentenced for BEC. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/breach-roundup-cisco-sd-wan-flaw-under-attack-a-33001
-
KillSec Ransomware Group Dismantled, 16-Year-Old Suspected Admin Arrested
An international police operation has disrupted the KillSec ransomware group, with three suspects arrested, five servers seized and… First seen on hackread.com Jump to article: hackread.com/killsec-ransomware-group-dismantled-admin-arrested/
-
Operation KillSwitch: Police Dismantle KillSec Ransomware Group
Operation KillSwitch: Europol says the KillSec ransomware group, allegedly led by a 16-year-old, was dismantled after attacks on about 1,000 victims. Law enforcement seized control of KillSec ‘s dark web leak site, the Tor website the group used to threaten victims with publishing stolen files unless they paid up. That single action locked down more…
-
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of stealing data from organizations and threatening to publish it on its leak site unless they paid.The 16-year-old was one of 3 people arrested on September 30, when police also took control of that site.Investigators identified…
-
Police disrupt KillSec ransomware, arrest suspected teenage leader
European police said raids against the KillSec ransomware-as-a-service operation included the arrest of a high-profile teen suspect. First seen on therecord.media Jump to article: therecord.media/killsec-ransomware-raas-arrests-europe
-
Zerschlagung der Ransomware-Infrastruktur von <>
Am ersten Oktober haben mehrere internationale Strafverfolgungsbehörden die Schließung der von den bekannten Ransomware-Betreibern KillSec betriebenen Plattform durch Europol verkündet. Die Bitdefender-Einheit für den Kampf gegen Cyberkriminelle, das Dracoteam, beriet die Ermittler und stellte Ressourcen und Anleitungen bereit. In Deutschland waren das Bundeskriminalamt, das Landeskriminalamt Hamburg und die Staatsanwaltschaft Hamburg beteiligt. Alexandru Nicola Stoica, Senior…
-
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
An international law enforcement operation dubbed “Operation KillSwitch” seized the KillSec ransomware gang’s data leak site and servers, led to three arrests, and identified a 16-year-old as the group’s alleged administrator. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/police-dismantle-killsec-ransomware-gang-allegedly-led-by-16-year-old/
-
16-year-old suspected leader of KillSec ransomware group arrested
A 16-year-old is suspected of being the main operator of KillSec, a ransomware group that Eurojust says is responsible for almost 1,000 attacks worldwide. Seizure notice … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/01/killsec-ransomware-16-year-old-main-operator-arrested/
-
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
An international law enforcement operation dubbed “Operation KillSwitch” seized the KillSec ransomware gang’s data leak site and servers, led to three arrests, and identified a 16-year-old as the group’s alleged administrator. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/police-dismantle-killsec-ransomware-gang-allegedly-led-by-16-year-old/
-
Ransomware-Report von Zscaler enthüllt massiven Datendiebstahl Führungskräfte im Visier und erpresste Millionenbeträge
Zscaler veröffentlicht den jüngsten ThreatLabz-2026-Ransomware-Report und enthüllt einen Anstieg von Ransomware-Angriffen im Vergleich zum letztem Jahr um 275 Prozent. Dabei nahmen die Angreifer KI-Unterstützung zu Hilfe und Unternehmen zahlten mehr als 328 Millionen US-Dollar an Lösegelder. Im Lauf des Untersuchungszeitraums wurden fast 900 Terabyte an Daten gestohlen. Der durch KI getriebene Anstieg der Ransomware-Angriffe zielt…
-
Warlock Ransomware Hits Large Spanish, Portuguese Orgs
A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/warlock-ransomware-spanish-portuguese
-
Zscaler Ransomware Report 2026: 896 Terabyte Datendiebstahl, KI-Angriffe und Führungskräfte im Fokus
Zscaler ThreatLabz meldet 275 Prozent mehr Ransomware-Datendiebstahl. Fast 900 TB Daten wurden gestohlen, Führungskräfte geraten stärker ins Visier. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zscaler-ransomware-report-2026-896-terabyte-datendiebstahl-ki-angriffe-und-fuehrungskraefte-im-fokus/a46590/
-
Global Group Ransomware Abuses WinMerge to Deploy Encryptor
Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises. First seen on hackread.com Jump to article: hackread.com/global-group-ransomware-winmerge-deploy-encryptor/
-
South Africa Seeks Help After Cyberattack Targets Air Traffic Control
As aviation infrastructure suffers more cyberattacks, air traffic systems are the latest target, with a ransomware toolkit installed on at least one operational network. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/south-africa-help-cyberattack-air-traffic-control
-
South Africa Seeks Help After Cyberattack Targets Air Traffic Control
As aviation infrastructure suffers more cyberattacks, air traffic systems are the latest target, with a ransomware toolkit installed on at least one operational network. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/south-africa-help-cyberattack-air-traffic-control
-
Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches
Keio, a major Japanese railway operator, was hit by ransomware, disrupting business systems and forcing the company to shut down its network. Keio Corporation, one of Japan’s major private railway operators, was hit by a ransomware attack over the weekend, disrupting some of its business systems. The company detected a system failure early Saturday and…
-
When the Ransom Note Appears, the Room Splits in Two
Why Documented Recovery Testing Outweighs Every Ransomware Assurance Claim Made When ransomware hits, CEOs ask if they can pay it away while CISOs ask whether systems can be restored quickly and safely. Regular recovery testing within isolated environments, along with segmentation and documented results, can bring those two conversations together before the next attack hits.…
-
Arizona Supreme Court says hackers stole residents’ personal data
A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday. First seen on therecord.media Jump to article: therecord.media/arizona-supreme-court-says-hackers-stole-data
-
Arizona Supreme Court says hackers stole residents’ personal data
A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday. First seen on therecord.media Jump to article: therecord.media/arizona-supreme-court-says-hackers-stole-data
-
Keio Railway Confirms Ransomware Attack Disrupted Business Systems
Keio Corporation has confirmed that a ransomware attack has caused a system failure within parts of its group infrastructure, disrupting certain business systems at its affiliated companies. The Japanese railway operator stated that train services continue to operate and that it has not yet confirmed any data breach. In a public notice issued on September…
-
Japan’s Keio confirms ransomware attack disrupted business systems
Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japans-keio-confirms-ransomware-attack-disrupted-business-systems/
-
JadePuffer agentic AI attacks target Azure, destroy cloud resources
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/jadepuffer-agentic-ai-attacks-target-azure-destroy-cloud-resources/
-
Storm-3168, Linked to JADEPUFFER, Abused Stolen Azure Identities
Microsoft details Storm-3168, the JADEPUFFER-linked actor that used stolen service principals to delete Azure storage in minutes and harvest keys. Microsoft just published the first detailed look at what JADEPUFFER does inside Azure. Sysdig first spotted the group’s activity in July 2026 and called it the first documented agentic ransomware operation. Microsoft tracks the same…