Last Week in Ransomware: 08.12.2024

This Halcyon.ai ransomware roundup details significant active threats: Synnovis (UK healthcare) remains heavily impacted by a disruptive ransomware incident causing cancelled surgeries and low blood stocks; Play ransomware released a Linux variant that targets VMware ESXi hosts; Dark Angels reportedly secured a record $75M ransom payment; and multiple emerging groups (BrainCipher, Mad Liberator, RansomCortex, SenSayQ, Cicada3301) are conducting data exfiltration and extortion operations—illustrating increased targeting of Linux/cloud infrastructure and the growth of RaaS and data extortion trends.