Halcyon Threat Insights 015: April 2025 Ransomware Report

Halcyon RISE Team's March 2025 intelligence summarizes ransomware precursors, trojans, and payloads detected and blocked across customer environments—highlighting common hack tools (e.g., Mimikatz, RemCom, SharpHound), trojans and stealers (e.g., LummaStealer, Upatre), multiple ransomware families (Maze, Rhysida, Coroxy/Play, BianLian), sector targeting (manufacturing, financial, business services), and a spotlight on the GhostLocker RaaS actor; the bulletin includes mitigation-focused context and links to advisories and further resources.