Incidents involving malware or ransomware. In some cases, incidents called “ransomware” do not involve any locking but merely hack, exfiltrate, and attempt to extort.
In March 2025, CISA published an advisory on the Medusa ransomware gang. They have now updated it, noting: Medusa is a ransomware-as-a-service (RaaS) variant first identified in June 2021. As of April 2026, Medusa developers and affiliates—referred to as “Medusa actors” in this advisory—have impacted over 500 victims from a variety of critical infrastructure sectors. […]
The Hacker News reports: A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and running Ransom Cartel, the ransomware-as-a-service operation he stood up in 2021. Between 2021 and 2023, Ransom Cartel conspirators attacked at least 18 companies, including firms in California, New York and Nebraska, and others abroad, […]
Manila Standard reports that identity is the dominant initial access vector in ransomware attacks, according to a new report from Sophos: Sophos, a global cybersecurity leader, released its seventh annual State of Ransomware report, a vendor-agnostic survey of IT and cybersecurity leaders across 17 countries identifying the impact of ransomware on businesses and how prepared organizations […]
The Verge reports: Federal authorities have arrested a Florida man suspected of stealing at least $220,000 in crypto through malware-infected Steam games, as reported earlier by local news outlet Local10. In the complaint, officials accuse 21-year-old Zyaire Wilkins and co-conspirators of launching eight malware-embedded games from around May 2024 to February 2026, allowing them to infect about 8,000 […]
Help Net Security reports: A financially motivated threat actor is impersonating hundreds of brands on GitHub and pushing a smash-and-grab infostealer masquerading as legitimate downloads of popular software, Arctic Wolf threat researchers have warned. “The 292 impersonated repositories span security tooling, fintech and personal finance, cryptocurrency wallets and exchanges, developer and productivity tools, secure email […]
The Record reports two wins for law enforcement this week. U.S. prosecutors announced two milestones this week in their cases against major ransomware groups. Karen Serobovich Vardanyan, a 34-year-old Armenian national, pleaded guilty Wednesday in an Oregon federal court to conspiracy and computer fraud. For about six months beginning in November 2019, he accessed companies’ computer networks […]
Security Boulevard reports: An emerging ransomware campaign is targeting small businesses with phishing emails that impersonate Interpol. The fake notices claim the recipient’s organization is under investigation for suspicious activity and that investigators have obtained information and video evidence tied to alleged criminal conduct. The lure is designed to create urgency and push the victim […]
HackRead reports: Fake Interpol investigation emails are targeting small businesses with Proton Drive links that deliver ransomware, encrypt files, and route victims to Tox chat. Small businesses are being targeted by fake Interpol investigation emails that impersonate law enforcement officials and pressure recipients to open files presented as evidence of suspicious company activity. In reality, doing […]
The Record reports: Just in time for the World Cup’s “knockout” round, the U.S. government announced the seizure of hundreds of internet domains that were illegally streaming broadcasts of matches. Nearly 400 sites were taken down, the Department of Justice said in a news release Friday. Authorities noted that unauthorized streaming presents other dangers beyond intellectual property […]
Politie (the Dutch Police) reports: In Operation Endgame, a major operation this week disrupted a key infection chain used by cybercriminals. Within an international cooperation, 14.971 websites infected with SocGholish malware were remediated. This malware is used by a criminal group that plays a pivotal role in international cybercrime, namely: Evil Corp. SocGholish exploits hacked […]
