Latest Ransomware news

Christie's starts notifying clients of RansomHub data breach

British auction house Christie's is notifying individuals whose data was stolen by the RansomHub ransomware gang in a recent network breach.
- Sergiu Gatlan
- June 07, 2024
- 03:04 PM
- 0
Frontier warns 750,000 of a data breach after extortion threats

Frontier Communications is warning 750,000 customers that their information was exposed in a data breach after an April cyberattack claimed by the RansomHub ransomware operation.
- Bill Toulas
- June 07, 2024
- 02:45 PM
- 1
New Fog ransomware targets US education sector via breached VPNs

A new ransomware operation named 'Fog' launched in early May 2024, is using compromised VPN credentials to breach the networks of educational organizations in the U.S.
- Bill Toulas
- June 06, 2024
- 02:29 PM
- 0
Linux version of TargetCompany ransomware focuses on VMware ESXi

Researchers observed a new Linux variant of the TargetCompany ransomware family that targets VMware ESXi environments using a custom shell script to deliver and execute payloads.
- Bill Toulas
- June 05, 2024
- 07:17 PM
- 0
FBI recovers 7,000 LockBit keys, urges ransomware victims to reach out

The FBI urges past victims of LockBit ransomware attacks to come forward after revealing that it has obtained over 7,000 LockBit decryption keys that they can use to recover encrypted data for free.
- Sergiu Gatlan
- June 05, 2024
- 06:48 PM
- 9
Qilin ransomware gang linked to attack on London hospitals

A ransomware attack that hit pathology services provider Synnovis on Monday and impacted several major NHS hospitals in London has now been linked to the Qilin ransomware operation.
- Sergiu Gatlan
- June 05, 2024
- 01:57 PM
- 0
RansomHub extortion gang linked to now-defunct Knight ransomware

Security researchers analyzing the relatively new RansomHub ransomware-as-a-service believe that it has evolved from the currently defunct Knight ransomware project.
- Bill Toulas
- June 05, 2024
- 08:39 AM
- 0
Australian mining company discloses breach after BianLian leaks data

Northern Minerals issued an announcement earlier today warning that it suffered a cybersecurity breach resulting in some of its stolen data being published on the dark web.
- Bill Toulas
- June 04, 2024
- 06:10 PM
- 0
Major London hospitals disrupted by Synnovis ransomware attack

A ransomware attack affecting pathology and diagnostic services provider Synnovis has impacted healthcare services at multiple major NHS hospitals in London.
- Sergiu Gatlan
- June 04, 2024
- 12:05 PM
- 0
Sponsored Content
How Allowlisting software can Prevent Ransomware and Data Theft

Allowlisting solutions can be a game changer in fortifying your cybersecurity defenses and protecting against ransomware and data theft attacks. Learn more from ThreatLocker on the pros and cons of Allowlisting.
- Sponsored by ThreatLocker
- June 03, 2024
- 10:25 AM
- 0
Microsoft links North Korean hackers to new FakePenny ransomware

Microsoft has linked a North Korean hacking group it tracks as Moonstone Sleet to FakePenny ransomware attacks, which have led to millions of dollars in ransom demands.
- Sergiu Gatlan
- May 28, 2024
- 01:58 PM
- 0
Christie’s confirms breach after RansomHub threatens to leak data

Christie's confirmed that it suffered a security incident earlier this month after the RansomHub extortion gang claimed responsibility and threatened to leak stolen data.
- Bill Toulas
- May 28, 2024
- 12:10 PM
- 0
New ShrinkLocker ransomware uses BitLocker to encrypt your files

A new ransomware strain called ShrinkLocker creates a new boot partition to encrypt corporate systems using Windows BitLocker.
- Ionut Ilascu
- May 24, 2024
- 10:59 AM
- 0
LockBit says they stole data in London Drugs ransomware attack

Today, the LockBit ransomware gang claimed they were behind the April cyberattack on Canadian pharmacy chain London Drugs and is now threatening to publish stolen data online after allegedly failed negotiations.
- Sergiu Gatlan
- May 21, 2024
- 05:23 PM
- 0
OmniVision discloses data breach after 2023 ransomware attack

The California-based imaging sensors manufacturer OmniVision is warning of a data breach after the company suffered a Cactus ransomware attack last year.
- Bill Toulas
- May 20, 2024
- 04:51 PM
- 0
Ransomware gang targets Windows admins via PuTTy, WinSCP malvertising

A ransomware operation targets Windows system administrators by taking out Google ads to promote fake download sites for Putty and WinSCP.
- Lawrence Abrams
- May 18, 2024
- 02:23 PM
- 0
The Week in Ransomware - May 17th 2024 - Mailbombing is back

This week was pretty quiet on the ransomware front, with most of the attention on the seizure of the BreachForums data theft forum. However, that does not mean there was nothing of interest released this week about ransomware.
- Lawrence Abrams
- May 17, 2024
- 05:30 PM
- 1
MediSecure e-script firm hit by ‘large-scale’ ransomware data breach

Electronic prescription provider MediSecure in Australia has shut down its website and phone lines following a ransomware attack believed to originate from a third-party vendor.
- Bill Toulas
- May 16, 2024
- 01:08 PM
- 1
Windows Quick Assist abused in Black Basta ransomware attacks

Financially motivated cybercriminals abuse the Windows Quick Assist feature in social engineering attacks to deploy Black Basta ransomware payloads on victims' networks.
- Sergiu Gatlan
- May 15, 2024
- 01:06 PM
- 2
Singing River Health System: Data of 895,000 stolen in ransomware attack

The Singing River Health System is warning that it is now estimating that 895,204 people are impacted by a ransomware attack it suffered in August 2023.
- Bill Toulas
- May 14, 2024
- 04:08 PM
- 0