Ransomware — Page 7

Illustration: a dim data centre aisle, rack-mounted servers glowing with cool blue status lights
Ransomware

AI-hunting ransomware 'EncForge' locks up model files as JadePuffer agent adapts on the fly

The autonomous attacker rewrote its own delivery script six times in five minutes before encrypting a Langflow server's machine-learning assets.

4 min read
Illustration: an empty airport departure hall at dusk
Ransomware

Armenia Grabs Russian Tourist at Yerevan Airport on U.S. REvil Warrant

Aleksandr Ermakov has sat in an Armenian detention center since June 28. His lawyers say the FBI has the wrong man.

3 min read
Illustration: an empty stainless-steel dairy bottling line at a large modern factory, conveyor belts still
Ransomware

Ransomware Attack Halts Fairlife Milk Production Across the US

Coca-Cola told the SEC that hackers broke into its Fairlife dairy subsidiary, forcing the company to stop making protein shakes and ultra-filtered milk at its American plants.

3 min read
Illustration: A dimly lit server room with rows of rack-mounted servers
Ransomware

Spirals ransomware crew locked down an IT firm's network in under a day

A new group broke in through an exposed web server, disabled defences and encrypted files inside 24 hours, Symantec says.

4 min read
Illustration: A heavy steel chain and padlock wrapped around a sleek laptop computer sitting on a plain dark desk
Ransomware

Fake Emails Now Beat Software Flaws as the Number-One Way Ransomware Gets In

A Sophos survey of more than 2,000 organisations hit by ransomware finds that phishing and malicious emails now cause half of all attacks, while stolen passwords are defeating even multi-factor authentication at an alarming rate.

3 min read
Illustration: a dimly lit server room with rows of humming rack-mounted servers, cold blue LEDs, tangled ethernet cables
Ransomware

US charges three Russians behind 'bulletproof' hosting service used by LockBit and Play ransomware

Federal prosecutors say Media Land and ML.Cloud rented servers to ransomware crews that caused more than $62 million in damage across 21 US states.

4 min read
Illustration: a dimly lit server room with rows of dark server racks, one rack visibly powered down with cables hanging loose
Ransomware

US sanctions a VPN, a malware disguiser, and the people behind them for helping ransomware gangs

Treasury targets 1VPNS and a Belarusian 'crypter' seller who together helped ransomware crews hit hospitals, banks and local governments.

3 min read
Illustration: Cool blue and white light from rack-mounted servers lines a long corridor
Ransomware

Ransomware group claims attack on Els for Autism Foundation

A criminal group called cmdorganization has listed the Florida-based autism charity on a dark-web extortion site. The foundation has not confirmed any incident, and the claim could not be independently verified.

2 min read
A dim server room bathed in cold blue light, rows of rack-mounted servers with faint red status LEDs, one open cabinet showing tangled fibre cables, shallow dep
Ransomware

Ryuk ransomware suspect admits role in $15 million hacking spree

Karen Vardanyan pleaded guilty in a US court to breaking into company networks and helping unleash Ryuk ransomware, one of the most damaging extortion tools of 2019 and 2020.

3 min read
Illustration: Interior of a modern hospital server room bathed in cool blue LED light
Ransomware

Hackers Are Targeting the Companies Behind Your Hospital, Not Just the Hospital Itself

Attacks on healthcare vendors and billing firms surged 110% in a year. Criminals have worked out that one breach can reach hundreds of hospitals at once.

3 min read
Illustration: an empty modern negotiation room with a single laptop open on a long dark table
Ransomware

Ransomware Negotiator Turned Attacker Gets Nearly Six Years for BlackCat Extortion Scheme

Angelo Martino, a former DigitalMint employee, was paid to help victims recover from ransomware. Instead he ran the attacks himself, leaking insurance details to squeeze bigger payouts.

3 min read
Illustration: A dark server room with rows of rack-mounted machines, several status LEDs glowing red instead of green
Ransomware

New 'GodDamn' Ransomware Uses a Rogue Driver to Kill Antivirus Software

Symantec links the May 2026 strain to the older Beast ransomware family, with medium confidence it's a rebrand.

3 min read
Illustration: a modern server rack with blinking amber and red status lights in a darkened data centre
Ransomware

A Microsoft-Approved Driver Is Helping 'GodDamn' Ransomware Gut US Security Tools

A rebranded criminal gang called Hyadina is using a signed Windows driver to kill antivirus software before locking victims' files. The driver carries a legitimate Microsoft stamp, and nobody knows quite how that happened.

3 min read
Illustration: A long row of illuminated server racks in a darkened enterprise data centre
Ransomware

The Gentlemen Ransomware Gang Turns Your Own IT Tools Against You

A fast-spreading criminal group is using the software your IT team trusts every day to take over company networks. The real test is not whether they got in. It is what happens next.

3 min read
Illustration: A large university lecture hall shot from the back of the room
Ransomware

When the Learning Platform Goes Dark, There Is No Backup Plan

A finals-week breach of a major university software platform in 2026 left students locked out of coursework and grade books. Higher education has proved twice it will pay ransoms. That changes everything.

3 min read
© 2026 Threat Vectr