In a significant development, the UK’s National Crime Agency (NCA) has named Aleksandr Ryzhenkov as a key figure in the notorious Russian cybercrime group Evil Corp, while also identifying him…
Introduction In September 2024, JPCERT/CC released a detailed blog post uncovering how Windows Event Logs can be a powerful tool for identifying human-operated ransomware campaigns. The research focuses on notable…
As we approach the final quarter of 2024, the cyber threat intelligence (CTI) landscape continues to evolve, driven by a combination of emerging threats, geopolitical factors, and the maturation of…
In September 2024, U.S. authorities raised alarms over a significant threat that has been quietly gaining momentum this year—RansomHub, a ransomware-as-a-service (RaaS) platform that has been targeting vital sectors across…
In June 2024, the LockBit ransomware group, a notorious name in the ransomware world, claimed to have stolen 33TB of data from the U.S. Federal Reserve. This bold claim, if…
In June 2024, Keytronic, a prominent U.S.-based manufacturer of printed circuit board assemblies (PCBAs), was targeted by the Black Basta ransomware group. The attack severely impacted the company’s operations in…
In June 2024, the Qilin ransomware group launched a targeted attack on Synnovis, a private healthcare provider serving several NHS Trusts in London, including Guy’s and St Thomas’ NHS Foundation…
On May 14th, 2024, the Rhysida ransomware group executed a highly disruptive cyberattack on Singing River Health System, compromising the personal data of approximately 895,000 individuals. The attack resulted in…
On May 12th, 2024, Christie’s Auction House fell victim to a ransomware attack orchestrated by the RansomHub group. The attack forced Christie’s to temporarily shut down its website and delay…
On May 5th, 2024, the city of Wichita, Kansas, experienced significant disruptions after a LockBit ransomware attack targeted its government systems. The attack forced the shutdown of several critical services,…