Ransomware Attacks are on the Rise
LockBit dominates ransomware attacks with a global affiliate model. Conti splinters now compete for share, concentrating power among fewer but more dangerous criminal groups.
ACTIVE THREATS: CISA: Hackers now exploit max severity GitLab flaw in attacks • How a hole in Lenovos login system let hackers walk into 5,000 Dropbox accounts • The US military just turned off ad tracking on its phones. Maybe you should too • Hackers exploit Tencent app flaw to deploy GrayRabbit malware • CRPx0 ransomware: what you need to know ACTIVE THREATS: CISA: Hackers now exploit max severity GitLab flaw in attacks • How a hole in Lenovos login system let hackers walk into 5,000 Dropbox accounts • The US military just turned off ad tracking on its phones. Maybe you should too • Hackers exploit Tencent app flaw to deploy GrayRabbit malware • CRPx0 ransomware: what you need to know
Latest cybersecurity ransomware news, analysis, and intelligence.
LockBit dominates ransomware attacks with a global affiliate model. Conti splinters now compete for share, concentrating power among fewer but more dangerous criminal groups.
INTERPOL dismantled 45,000 malicious IPs and arrested 94 cybercriminals, disrupting phishing and ransomware networks globally. The operation marks a shift toward proactive infrastructure destruction.
Slopoly, AI-generated malware for Interlock ransomware, maintained persistence for a week while enabling reconnaissance and theft before encryption—showing how generative AI enhances sophisticated attacks.
AiLock ransomware breached England Hockey and published the organization on its dark web extortion site. The attackers stole member data, financial records, and operational documents to extort payment while threatening public disclosure of sensitive information.
Hive0163 uses Slopoly, an AI-generated malware, to establish persistent network access before ransomware deployment. The machine learning-generated code evades detection and enables reconnaissance.
Former DigitalMint negotiator charged with insider scheme helping BlackCat ransomware operators extort clients by exploiting confidential attack and negotiation intelligence.
VoltZite represents the first major OT-aware ransomware campaign against North American power grids, combining IT and operational technology exploitation. Three utilities were compromised, causing limited outages before containment.