Tag: ransomware
-
(g+) Ransomware 2025: Wie mit KI-gestützten Angriffen Firmen erpresst werden
KI macht Verschlüsselungstrojaner schlauer. Wir zeigen, wie sich Unternehmen 2025 wehren können. First seen on golem.de Jump to article: www.golem.de/news/ransomware-2025-wie-mit-ki-gestuetzten-angriffen-firmen-erpresst-werden-2509-200332.html
-
Zloader Malware Used as Gateway for Ransomware Deployment in Corporate Networks
Zloader, a sophisticated Zeus-based modular trojan that first emerged in 2015, has undergone a significant transformation from its original banking-focused purpose to become a dangerous tool for initial access and ransomware deployment in corporate environments. Following an almost two-year hiatus, this malware reemerged in September 2023 with substantial enhancements to its obfuscation techniques, domain generation…
-
Nachlese Sicherheitsvorfall bei Collins Aerospace, der Flughäfen lahm legte
In den Abendstunden des 19. September 2025 (Freitag) gab es einen Ransomware-Angriff auf den Dienstleister Collins Aerospace, der für europäische Flughäfen u.a. die Check-In-Systeme betreibt. In Folge kam es dann am Wochenende zu zahlreichen Flugausfällen, und die IT-Störungen beim Dienstleister … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/09/23/nachlese-sicherheitsvorfall-bei-collins-aerospace-der-flughaefen-lahm-legte/
-
European Airport Operations Disrupted by Ransomware
Passengers across Europe are facing another day of flight delays after a cyber-attack struck the company behind the check-in and boarding software used at many airports. London Heathrow, Brussels, Dublin and Berlin have been worst hit since Friday, when the attack first took hold. Automatic kiosks and bag-drop machines went offline, forcing airline staff to…
-
European Airport Operations Disrupted by Ransomware
Passengers across Europe are facing another day of flight delays after a cyber-attack struck the company behind the check-in and boarding software used at many airports. London Heathrow, Brussels, Dublin and Berlin have been worst hit since Friday, when the attack first took hold. Automatic kiosks and bag-drop machines went offline, forcing airline staff to…
-
European Airport Disruptions Caused by Ransomware: EU Cyber Office
The EU’s cybersecurity agency says the widespread disruptions at airports in Belgium, England, and Germany were the result of a ransomware attack on third-party on-boarding software from Collins Aerospace that was used at all three airports. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/european-airport-disruptions-caused-by-ransomware-eu-cyber-office/
-
Airport disruptions in Europe caused by a ransomware attack
The disruptions over the weekend at several major European airports were caused by a ransomware attack targeting the check-in and boarding systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/airport-disruptions-in-europe-caused-by-a-ransomware-attack/
-
2 Clinics Notify 700,000 Patients of Alleged BianLian Hacks
Now-Dormant Gang Claimed North Carolina, Florida Groups on Data Leak Site This Year. Two medical practices – in North Carolina and Florida – are notifying a total of more than 700,000 patients whose information was potentially stolen in separate hacks earlier this year. The now-dormant ransomware gang BianLian had claimed both organizations as victims on…
-
MalTerminal Malware Turns GPT-4 Into a Ransomware Factory
Researchers uncover MalTerminal, the first GPT-4-powered malware that creates ransomware and reverse shells on demand. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/malterminal-malware-gpt-4/
-
Cyber attack that downed airport systems confirmed as ransomware
Authorities in Europe say the cyber attack that caused disruption to passenger-facing services at multiple airports, including Heathrow, was the result of ransomware, as investigations continue. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366631592/Cyber-attack-that-downed-airport-systems-confirmed-as-ransomware
-
Technical Analysis of Zloader Updates
Tags: access, attack, banking, cloud, communications, control, corporate, data, data-breach, detection, dns, encryption, malware, network, ransomware, strategy, threat, update, windowsIntroductionZloader (a.k.a. Terdot, DELoader, or Silent Night) is a Zeus-based modular trojan that emerged in 2015. Zloader was originally designed to facilitate banking, but has since been repurposed for initial access, providing an entry point into corporate environments for the deployment of ransomware. Following an almost two-year hiatus, Zloader reemerged in September 2023 with significant enhancements…
-
Ransomware Behind Collins Aerospace Hack, ENISA Says
Major European Airports Continue to Face Service Disruptions Following Friday Hack. European cyber defenders classified as a ransomware attack an incident that disrupted several major European airports including London Heathrow resulting in flight cancelations and delays over the weekend and Monday. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ransomware-behind-collins-aerospace-hack-enisa-says-a-29498
-
Flights across Europe delayed after cyberattack targets third-party vendor
A suspected ransomware attack targeting a U.S. company that provides check-in technology has led to widespread flight disruptions since Friday. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/flights-europe-delayed-cyberattack-third-party/760745/
-
Fake Ukrainian Police Emails Spread New CountLoader Malware Loader
A new malware loader, CountLoader, has been discovered by cybersecurity firm Silent Push. This threat is linked to prominent Russian ransomware gangs, including LockBit, BlackBasta, and Qilin, and is being used as an initial access broker. First seen on hackread.com Jump to article: hackread.com/fake-ukrainian-police-emails-countloader-malware-loader/
-
Fake Ukrainian Police Emails Spread New CountLoader Malware Loader
A new malware loader, CountLoader, has been discovered by cybersecurity firm Silent Push. This threat is linked to prominent Russian ransomware gangs, including LockBit, BlackBasta, and Qilin, and is being used as an initial access broker. First seen on hackread.com Jump to article: hackread.com/fake-ukrainian-police-emails-countloader-malware-loader/
-
EU cyber agency confirms ransomware attack causing airport disruptions
A cyberattack targeting Collins Aerospace, a provider of airport check-in systems, sparked delays and disrupted flights across Europe over the weekend. First seen on techcrunch.com Jump to article: techcrunch.com/2025/09/22/eu-cyber-agency-confirms-ransomware-attack-causing-airport-disruptions/
-
EU’s cyber agency blames ransomware as Euro airport check-in chaos continues
Airport staff revert to manual ops as travellers urged to use self-service check-in where possible First seen on theregister.com Jump to article: www.theregister.com/2025/09/22/eus_cyber_agency_confirms_ransomware/
-
Teenage Scattered Spider Suspect Arrested in Las Vegas
Juvenile Male Tied to Hack Attacks Against MGM Resorts and Caesars Entertainment. The net continues to close on suspected members of the notorious ransomware-wielding group called Scattered Spider, with Las Vegas police announcing the arrest of a teenage, juvenile male suspect tied to 2023 attacks that hit MGM Resorts and Caesars Entertainment. First seen on…
-
EU’s cyber agency blames ransomware as Euro airport check-in chaos continues
Airport staff revert to manual ops as travellers urged to use self-service check-in where possible First seen on theregister.com Jump to article: www.theregister.com/2025/09/22/eus_cyber_agency_confirms_ransomware/
-
Major European airports work to restore services after cyberattack on check-in systems
Airports in London, Brussels and Berlin are among those working to restore check-in systems and overcome delays after a ransomware attack on a U.S. technology provider. First seen on therecord.media Jump to article: therecord.media/europe-airports-delays-ransomware-attack-checkin-systems
-
Threat Actors Exploit Oracle Database Scheduler to Infiltrate Corporate Networks
Threat actors have begun exploiting the Oracle Database Scheduler’s External Jobs feature to execute arbitrary commands on corporate database servers, enabling stealthy initial footholds and rapid escalation of privileges. By abusing the extjobo.exe executable, attackers can run encoded PowerShell commands, establish encrypted tunnels with Ngrok, and deploy ransomware, all while evading detection through aggressive cleanup…
-
BlackLock Ransomware Targets Windows, Linux, and VMware ESXi Systems
BlackLock, a rebranded ransomware group formerly known as El Dorado, has emerged as a formidable threat to organizations worldwide. First identified in June 2024 when its Dedicated Leak Site (DLS) began exposing victim data, the gang is believed to have been active since March 2024. The latest analysis by AhnLab Security Intelligence Center (ASEC) sheds…
-
EU agency ENISA says ransomware attack behind airport disruptions
The EU cybersecurity agency ENISA confirmed that airport check-in disruptions were caused by a cyberattack, and law enforcement is investigating. A cyber attack on Collins Aerospace disrupted check-in and boarding systems at major European airports, heavily impacting Heathrow, Brussels, and Berlin. The outage caused numerous flight delays and cancellations, forcing manual operations. Collins Aerospace is…
-
Kawa4096 Ransomware Targets Multinational Corporations to Steal Sensitive Data
In June 2025, a previously unknown ransomware group dubbed Kawa4096 emerged, immediately drawing attention by targeting multinational organizations across diverse industries, including finance, education and services, in countries such as Japan and the United States. While no public evidence confirms a Ransomware-as-a-Service (RaaS) model or partnerships with other cybercriminals, the group’s attacks in multiple countries…
-
Alleged Scattered Spider teen cuffed after extortion Bitcoin used to buy games, meals
Feds say gift card splurges tied suspect to multimillion-dollar ransomware crew First seen on theregister.com Jump to article: www.theregister.com/2025/09/19/scattered_spider_teen_cuffed/
-
MalTerminal: New GPTPowered Malware That Writes Its Own Ransomware
A groundbreaking discovery in cybersecurity research has revealed the emergence of’MalTerminal’, potentially the earliest known example of Large Language Model (LLM)-enabled malware that leverages OpenAI’s GPT-4 API to dynamically generate ransomware code and reverse shells at runtime. This discovery represents a significant evolution in malware sophistication, presenting unprecedented challenges for traditional detection methods. SentinelLABS researchers…
-
Neue Hacker-Gruppe Yurei nutzt Open-Source-Code für Angriffe
Eine neue Ransomware-Gruppe namens Yurei japanisch für “rastlose Geister” hat binnen weniger Tage Unternehmen in Sri Lanka, Indien und Nigeria angegriffen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/neue-hacker-gruppe-yurei
-
Researchers Uncover GPTPowered MalTerminal Malware Creating Ransomware, Reverse Shell
Cybersecurity researchers have discovered what they say is the earliest example known to date of a malware with that bakes in Large Language Model (LLM) capabilities.The malware has been codenamed MalTerminal by SentinelOne SentinelLABS research team. The findings were presented at the LABScon 2025 security conference.In a report examining the malicious use of LLMs, the…
-
Scattered Spider Hackers Charged in Connection With Transport for London Attack
Victims collectively paid more than $115 million in ransomware payments, law enforcement said. The post Scattered Spider Hackers Charged in Connection With Transport for London Attack appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-scattered-spider-arrests/
-
Cybersecurity Consulting
Tags: attack, cyber, cybersecurity, exploit, phishing, ransomware, spam, supply-chain, threat, zero-dayAs businesses expand digitally, their attack surface grows exponentially. Cyber threats today are no longer limited to viruses or spam emails”, they include ransomware, insider threats, phishing, supply chain attacks, zero-day exploits, and nation-state campaigns. To counter this complexity, organizations need more than tools”, they need expert guidance. This is where cybersecurity consulting comes in.…