Ransomware

Full-frame photoreal editorial shot of a dim data centre aisle, rack-mounted servers glowing with cool blue status lights, one server showing a red alert LED, f
Ransomware

AI-hunting ransomware 'EncForge' locks up model files as JadePuffer agent adapts on the fly

The autonomous attacker rewrote its own delivery script six times in five minutes before encrypting a Langflow server's machine-learning assets.

4 min read
Full-frame photoreal editorial shot of an empty airport departure hall at dusk, warm sodium lighting on polished floors, a lone abandoned rolling suitcase near
Ransomware

Armenia Grabs Russian Tourist at Yerevan Airport on U.S. REvil Warrant

Aleksandr Ermakov has sat in an Armenian detention center since June 28. His lawyers say the FBI has the wrong man.

3 min read
Full-frame photoreal editorial shot of an empty stainless-steel dairy bottling line at a large modern factory, conveyor belts still, overhead fluorescent lights
Ransomware

Ransomware Attack Halts Fairlife Milk Production Across the US

Coca-Cola told the SEC that hackers broke into its Fairlife dairy subsidiary, forcing the company to stop making protein shakes and ultra-filtered milk at its American plants.

3 min read
Photoreal news-editorial image, 16:9, full frame edge to edge
Ransomware

Spirals ransomware crew locked down an IT firm's network in under a day

A new group broke in through an exposed web server, disabled defences and encrypted files inside 24 hours, Symantec says.

4 min read
Photoreal news-editorial photograph, 16:9 framing, full-frame edge-to-edge composition
Ransomware

Fake Emails Now Beat Software Flaws as the Number-One Way Ransomware Gets In

A Sophos survey of more than 2,000 organisations hit by ransomware finds that phishing and malicious emails now cause half of all attacks, while stolen passwords are defeating even multi-factor authentication at an alarming rate.

3 min read
Full-frame edge-to-edge photoreal news-editorial image of a dimly lit server room with rows of humming rack-mounted servers, cold blue LEDs, tangled ethernet ca
Ransomware

US charges three Russians behind 'bulletproof' hosting service used by LockBit and Play ransomware

Federal prosecutors say Media Land and ML.Cloud rented servers to ransomware crews that caused more than $62 million in damage across 21 US states.

4 min read
Full-frame photoreal editorial image of a dimly lit server room with rows of dark server racks, one rack visibly powered down with cables hanging loose, cool bl
Ransomware

US sanctions a VPN, a malware disguiser, and the people behind them for helping ransomware gangs

Treasury targets 1VPNS and a Belarusian 'crypter' seller who together helped ransomware crews hit hospitals, banks and local governments.

4 min read
A close-up, editorial-style photograph of a illuminated server room corridor at night, shot in 16:9 framing
Ransomware

Ransomware group claims attack on Els for Autism Foundation

A criminal group called cmdorganization has listed the Florida-based autism charity on a dark-web extortion site. The foundation has not confirmed any incident, and the claim could not be independently verified.

3 min read
A dim server room bathed in cold blue light, rows of rack-mounted servers with faint red status LEDs, one open cabinet showing tangled fibre cables, shallow dep
Ransomware

Ryuk ransomware suspect admits role in $15 million hacking spree

Karen Vardanyan pleaded guilty in a US court to breaking into company networks and helping unleash Ryuk ransomware, one of the most damaging extortion tools of 2019 and 2020.

4 min read
Photoreal news-editorial style, 16:9 framing, full-frame edge-to-edge composition
Ransomware

Hackers Are Targeting the Companies Behind Your Hospital, Not Just the Hospital Itself

Attacks on healthcare businesses, the billing firms and IT vendors that keep hospitals running, surged 110% in a year. Experts say criminals have figured out that one breach can unlock hundreds of patients at once.

3 min read
Photoreal news-editorial photograph, 16:9 framing, full-frame edge-to-edge composition
Ransomware

Security Consultant Who Secretly Fed Intel to BlackCat Ransomware Gang Gets Nearly Six Years

Angelo Martino was hired to help ransomware victims negotiate their way out. Instead, he sold their secrets to the criminals holding them hostage.

3 min read
Photoreal editorial shot of an empty modern negotiation room with a single laptop open on a long dark table, a lock icon glowing faintly on the screen, harsh ov
Ransomware

Ransomware Negotiator Turned Attacker Gets Nearly Six Years for BlackCat Extortion Scheme

Angelo Martino, a former DigitalMint employee, was paid to help victims recover from ransomware. Instead he ran the attacks himself, leaking insurance details to squeeze bigger payouts.

3 min read
Photoreal news-editorial image, full frame 16:9, edge to edge
Ransomware

New 'GodDamn' Ransomware Uses a Rogue Driver to Kill Antivirus Software

Symantec links the May 2026 strain to the older Beast ransomware family, with medium confidence it's a rebrand.

3 min read
Photoreal news-editorial photograph, 16:9 framing, full-frame edge-to-edge composition
Ransomware

A Microsoft-Approved Driver Is Helping 'GodDamn' Ransomware Gut US Security Tools

A rebranded criminal gang called Hyadina is using a signed Windows driver to kill antivirus software before locking victims' files. The driver carries a legitimate Microsoft stamp, and nobody knows quite how that happened.

3 min read
Photoreal news-editorial photograph, 16:9 framing, full-frame edge-to-edge
Ransomware

The Gentlemen Ransomware Gang Turns Your Own IT Tools Against You

A fast-spreading criminal group is using the software your IT team trusts every day to take over company networks. The real test is not whether they got in. It is what happens next.

3 min read
© 2026 Threat Vectr