Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware 2026-05-11 True editor True Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting 2026-04-22 True editor True Apache ActiveMQ Exploit Leads to LockBit Ransomware 2026-02-23 True editor True Cat’s Got Your Files: Lynx Ransomware 2025-12-17 True editor True Cat’s Got Your Files: Lynx Ransomware 2025-11-17 True editor True From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira 2025-11-04 True editor True From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion 2025-09-29 True editor True Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs 2025-09-08 True editor True From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira 2025-08-05 True editor True KongTuke FileFix Leads to New Interlock RAT Variant 2025-07-14 True editor True Hide Your RDP: Password Spray Leads to RansomHub Deployment 2025-06-30 True editor True Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware 2025-05-19 True editor True Navigating Through The Fog 2025-04-28 True editor True Fake Zoom Ends in BlackSuit Ransomware 2025-03-31 True editor True Confluence Exploit Leads to LockBit Ransomware 2025-02-24 True editor True Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware 2025-01-27 True editor True The Curious Case of an Egg-Cellent Resume 2024-12-02 True editor True Inside the Open Directory of the “You Dun” Threat Group 2024-10-28 True editor True Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware 2024-09-30 True editor True BlackSuit Ransomware 2024-08-26 True editor True Threat Actors’ Toolkit: Leveraging Sliver, PoshC2 & Batch Scripts 2024-08-12 True editor True IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment 2024-06-10 True editor True From IcedID to Dagon Locker Ransomware in 29 Days 2024-04-29 True editor True From OneNote to RansomNote: An Ice Cold Intrusion 2024-04-01 True editor True SEO Poisoning to Domain Control: The Gootloader Saga Continues 2024-02-26 True editor True Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours 2024-01-29 True editor True Lets Open(Dir) Some Presents: An Analysis of a Persistent Actor’s Activity 2023-12-18 True editor True SQL Brute Force Leads to BlueSky Ransomware 2023-12-04 True editor True NetSupport Intrusion Results in Domain Compromise 2023-10-30 True editor True From ScreenConnect to Hive Ransomware in 61 hours 2023-09-25 True editor True HTML Smuggling Leads to Domain Wide Ransomware 2023-08-28 True editor True A Truly Graceful Wipe Out 2023-06-12 True editor True IcedID Macro Ends in Nokoyawa Ransomware 2023-05-22 True editor True Malicious ISO File Leads to Domain Wide Ransomware 2023-04-03 True editor True 2022 Year in Review 2023-03-06 True editor True Collect, Exfiltrate, Sleep, Repeat 2023-02-06 True editor True 
