Tag: ransomware
-
Inside the FBI’s Strategy for Prosecuting Ransomware
The US government is throwing the book at even mid-level cybercriminals. Is it just, and is it working? First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/inside-fbi-strategy-prosecuting-ransomware
-
AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant Reveals
Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued target. With the rapid expansion and adoption of AI, it is more critical than ever to ensure the endpoint is adequately secured by a platform capable of not just keeping pace,…
-
Ransomware bleibt ein akutes Risiko und die Lage spitzt sich weiter zu
Ein wichtiger Hebel zur Risikominimierung liegt im menschlichen Verhalten. Viele Angriffe starten mit einem simplen Klick: über Phishing-Mails, unsichere Passwörter oder mangelnde Aufmerksamkeit. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/ransomware-bleibt-ein-akutes-risiko-und-die-lage-spitzt-sich-weiter-zu/a41561/
-
Nach Ransomware-Attacke: Hacker setzen IT-Großhändler Ingram Micro unter Druck
Nach einem Anfang Juli erfolgten Cyberangriff auf Ingram Micro machen die Angreifer nun Ernst. Sie drohen mit der Veröffentlichung von 3,5 TByte an Daten. First seen on golem.de Jump to article: www.golem.de/news/nach-ransomware-attacke-hacker-setzen-it-grosshaendler-ingram-micro-unter-druck-2507-198686.html
-
FunkSec Ransomware Victims Can Now Recover Files with Free Decryptor
Avast researchers shared a step-by-step guide to decrypt files for victims of FunkSec ransomware First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/funksec-ransomware-decryptor/
-
IR Trends Q2 2025: Phishing attacks persist as actors leverage compromised valid accounts to enhance legitimacy
Phishing remained the top initial access method in Q2 2025, while ransomware incidents see the emergence of new Qilin tactics. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/ir-trends-q2-2025/
-
Mind the overconfidence gap: CISOs and staff don’t see eye to eye on security posture
Tags: ai, attack, awareness, business, ciso, compliance, control, cyber, cybersecurity, data, defense, detection, grc, group, hacker, identity, incident response, intelligence, international, least-privilege, metric, network, phishing, ransomware, risk, risk-assessment, risk-management, soc, strategy, technology, threat, tool, training, updateMisplaced priorities: Investments often favor visibility and compliance over “core capabilities like detection engineering, incident response, and threat containment,” according to Santiago Pontiroli, lead security researcher at cybersecurity vendor Acronis TRU.Delayed adaptation: AI-driven threats demand faster, smarter defenses, but key upgrades (such as behavior-based analytics or automation) are often postponed due to underestimated risk, according…
-
Researchers released a decryptor for the FunkSec ransomware
Researchers have released a decryptor for the ransomware FunkSec, allowing victims to recover their encrypted files for free. Researchers at Avast developed a decryptor for the FunkSec ransomware. Gen Digital researchers released a decryptor for the FunkSec ransomware after cooperating with law enforcement to neutralize the threat. >>Researchers at Avast developed a decryptor for the…
-
Ransomware gang tells Ingram Micro, ‘Pay up by August 1’
Tags: access, attack, backup, breach, cyber, cyberattack, data, data-breach, encryption, exploit, extortion, government, group, international, Internet, law, leak, organized, ransom, ransomware, technology, tool, vpn, vulnerabilityRansomware attacks increase: In a report on ransomware released this week, researchers at Zscaler ThreatLabz said the number of organizations listed on all ransomware leak sites rose 70% in the 12 month period ending in April.A growing number of ransomware operators are abandoning encryption of data in favour of just data extortion, it noted. For…
-
Dollar Tree denies ransomware claims, says stolen data is from defunct discount chain
Discount retail giant Dollar Tree denied its systems were impacted by ransomware after a cybercriminal group claimed to have attacked the company. First seen on therecord.media Jump to article: therecord.media/dollar-tree-discount-stolen-data
-
Nikesh Arora: Why Palo Alto Is Making a $25B Bet on Identity
Tags: access, ai, attack, ceo, credentials, cybersecurity, identity, network, ransomware, risk, theftCyberArk Deal Adds Privileged Access Capabilities to Palo Alto Networks’ Core Stack. With a $25 billion acquisition of CyberArk, Palo Alto Networks expands its cybersecurity platform to secure human, machine and AI identities. CEO Nikesh Arora said the move is timely as 88% of ransomware attacks now stem from credential theft, and agentic AI emerges…
-
SafePay ransomware threatens to leak 3.5TB of Ingram Micro data
The SafePay ransomware gang is threatening to leak 3.5TB of data belonging to IT giant Ingram Micro, allegedly stolen from the company’s compromised systems earlier this month. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/safepay-ransomware-threatens-to-leak-35tb-of-ingram-micro-data/
-
Applying Tenable’s Risk-based Vulnerability Management to the Australian Cyber Security Centre’s Essential Eight
Tags: ai, attack, breach, business, cloud, compliance, container, control, cvss, cyber, cybersecurity, data, data-breach, defense, endpoint, finance, firewall, framework, google, government, identity, incident response, infrastructure, intelligence, Internet, microsoft, mitigation, network, ransomware, risk, service, software, strategy, technology, threat, tool, update, vpn, vulnerability, vulnerability-management, windows, zero-dayLearn how Thales Cyber Services uses Tenable to help customers navigate the maturity levels of the Essential Eight, enabling vulnerability management and staying ahead of cyber threats. In today’s fast-moving digital world, cyber threats are more advanced and relentless than ever. A single security breach can mean financial loss, reputational damage and operational chaos. That’s…
-
Qilin Ransomware Uses TPwSav.sys Driver to Bypass EDR Security Measures
Tags: cyber, cybercrime, data, detection, edr, endpoint, exploit, extortion, ransom, ransomware, service, tactics, vulnerabilityCybercriminals affiliated with the Qilin ransomware-as-a-service (RaaS) operation have demonstrated advanced evasion techniques by exploiting a previously undocumented vulnerable driver, TPwSav.sys, to disable Endpoint Detection and Response (EDR) systems through a bring-your-own-vulnerable-driver (BYOVD) attack. First observed in July 2022, Qilin employs double extortion tactics, exfiltrating data for leakage on dedicated sites if ransoms remain unpaid,…
-
FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant
Cybersecurity experts have released a decryptor for a ransomware strain called FunkSec, allowing victims to recover access to their files for free.”Because the ransomware is now considered dead, we released the decryptor for public download,” Gen Digital researcher Ladislav Zezula said.FunkSec, which emerged towards the end of 2024, has claimed 172 victims, according to data…
-
Decryptor released for FunkSec ransomware; Avast works with law enforcement to help victims
Cybersecurity company Avast released a decryptor for the short-lived FunkSec ransomware and said it is assisting dozens of the gang’s targets with the process. First seen on therecord.media Jump to article: therecord.media/funksec-ransomware-decryptor-avast
-
Inc Ransomware Claims 1.2TB Data Breach at Dollar Tree
The notorious INC Ransomware group is claiming responsibility for a data breach at Dollar Tree, the American retail… First seen on hackread.com Jump to article: hackread.com/inc-ransomware-1-2tb-data-breach-at-dollar-tree/
-
Ransomware upstart Gunra goes cross-platform with encryption upgrades
Tags: attack, breach, control, data, detection, encryption, endpoint, group, healthcare, linux, ransomware, update, vmware, windows-r” or “ratio” parameter. The “-l” or the “limit” parameter is used to control how much of the file gets encrypted. If no value is provided, the entire file is encrypted,” Trend Micro added.Additionally, the variant offers flexible key-storage options for RSA-encrypted keys. Using the “-s” or ““, store” parameter makes the ransomware save each…
-
Ransomware gang sets deadline to leak 3.5 TB of Ingram Micro data
Distie insists global operations restored despite some websites only now coming back online First seen on theregister.com Jump to article: www.theregister.com/2025/07/30/ingram_micro_ransomware_threat/
-
APT Hackers Target Maritime and Shipping Industry for Ransomware Attacks
Tags: apt, attack, cyber, cyberattack, group, hacker, intelligence, international, ransomware, threatThe maritime sector, which facilitates approximately 90% of international trade, is facing an unprecedented surge in sophisticated cyberattacks from advanced persistent threat (APT) groups, ransomware operators, and hacktivists, driven by escalating geopolitical conflicts. According to a recent Cyble intelligence report, over 100 such incidents have been documented in the past year, targeting shipping companies, ports,…
-
Umfrage unter 3.400 IT-lern beleuchtet Cybercrime-Lage – Teure Angriffe: Die Hälfte aller Ransomware-Opfer zahlt Lösegeld
First seen on security-insider.de Jump to article: www.security-insider.de/weniger-loesegeld-bei-ransomware-angriffen-a-43f5c610a4d5cafd067dd0bb537c3475/
-
Ransomware-Gruppen haben innerhalb eines Jahres 238 TByte an Daten gestohlen
Zscaler veröffentlicht seinen jährlichen . Ransomware-Angriffe nehmen in alarmierendem Tempo zu, was durch den Anstieg der in der Zscaler-Cloud abgewehrten Angriffsversuche im Vergleich zum Vorjahr um 146 Prozent zum Ausdruck kommt. Ransomware-Gruppen legen zudem mehr Fokus auf Erpressung als auf Verschlüsselung, denn die im Berichtszeitraum exfiltrierten Daten stiegen um 92 Prozent […] First seen on…
-
TrickBot Behind More Than $724 Million in Crypto Theft and Extortion
Akamai’s latest Ransomware Report 2025 reveals “quadruple extortion,” new AI-driven tactics by groups like Black Basta, FunkSec, and TrickBot, and growing threats to non-profits. Learn about evolving cyber threats. First seen on hackread.com Jump to article: hackread.com/trickbot-behind-724-million-crypto-theft-extortion/
-
FBI seizes 20 BTC from Chaos Ransomware affiliate targeting Texas firms
FBI Dallas seized 20 BTC from Chaos ransomware affiliate >>Hors,>Hors.
-
New Gunra Ransomware Linux Variant Launches 100 Encryption Threads with Partial Encryption Feature
The new Gunra group has expanded its attack surface beyond Windows PCs by releasing a Linux version of their virus, which was initially discovered in April 2025. This is a major uptick in the ransomware ecosystem. This development underscores the group’s strategic pivot toward cross-platform targeting, inspired by predecessors like Conti ransomware. Trend Micro’s threat…
-
Steigerung von Angriffsversuchen und aggressivere Erpressungstaktiken
Eine Zscaler-Analyse zeigt eine Zunahme von Ransomware-Attacken. Cyberkriminelle setzen verstärkt auf Datenerpressung statt Verschlüsselung. Die USA ist weiterhin Hauptziel der Angreifer, Deutschland auf dem vierten Platz. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/steigerung-von-angriffsversuchen-und-aggressivere-erpressungstaktiken
-
Zscaler ThreatLabz Report zeigt auf: Ransomware-Lage verschärft sich
Tags: ransomwareFür die Erstellung des Reports wurden unterschiedliche Datenquellen herangezogen, um Ransomware-Trends zu identifizieren und zu verfolgen. Das ThreatLabz-Team hat zwischen April 2024 und April 2025 Daten aus verschiedenen Quellen gesammelt First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zscaler-threatlabz-report-zeigt-auf-ransomware-lage-verschaerft-sich/a41531/
-
Free Decryptor Released for AI-Powered FunkSec Ransomware
Researchers at Avast have unveiled a free decryptor tool for victims of the FunkSec ransomware, marking a significant step in combating this now-defunct malware strain. Developed in collaboration with law-enforcement agencies, the decryptor enables affected users to recover encrypted files without paying ransoms. With the ransomware operation deemed inactive, Avast has made the tool publicly…