Halcyon Threat Insights 013: February 2025 Ransomware Report

**Executive summary:** Halcyon Threat Research's January 2025 report summarizes ransomware activity and precursors observed across its customer base, detailing detections of hack tools (e.g., Mimikatz, Kerbrute, Angry IP Scanner), multiple trojans, and ransomware families (e.g., Dcryptor/Mamba, DarkSide, BadRabbit) while profiling the Cloak RaaS group, its tactics, targets, and high payment success rate.