ThreatVectr
Tag

#ransomware

155 stories taggedransomware · page 2 of 11.

Illustration: A modern medical office reception desk
Ransomware

Ransomware Group N0n Claims Attack on Houston Thyroid and Endocrine Specialists

A criminal group has listed a Houston endocrinology practice on its dark-web pressure site, claiming to hold patient records. The practice has not publicly confirmed any incident.

3 min read
Illustration: A modern European office building at dusk, glass facade reflecting city lights, interior lights on
Ransomware

Ransomware Group The Gentlemen Claims Attack on German Secure-File Firm FTAPI Software

A criminal gang that has posted dozens of claimed victims in recent months has listed FTAPI Software on its dark-web extortion site. The Munich company serves hospitals, insurers and public agencies across Europe. Nothing has been confirmed.

3 min read
Illustration: A pane of industrial glass in a workshop setting
Ransomware

Ransomware Group The Gentlemen Claims Attack on Leeds Glass Firm Crystal Glass

A family-run glazing company in West Yorkshire has been listed on a dark-web extortion page by The Gentlemen ransomware group. The firm has not confirmed any incident, and the claim is unverified.

3 min read
Illustration: a small, snow-covered Arctic school building surrounded by a vast frozen tundra landscape under a pale winter
Ransomware

INC Ransom Claims Attack on Alaska School District Serving Remote Arctic Communities

The criminal group INC Ransom has listed North Slope Borough School District on its dark-web pressure site. The district has not confirmed any incident, and the claim has not been independently verified.

3 min read
Illustration: a dimly lit server room with four identical rack cabinets, each glowing a different colour (red, amber, blue
Ransomware

Microsoft names Storm-2570, the affiliate hopping between Qilin, DragonForce and other ransomware crews

The same intruder, the same toolkit, four different ransom notes. Microsoft says defenders who chase payloads keep missing the person behind them.

3 min read
Illustration: a dimly lit server rack in a data centre, one blade server pulled halfway out
Ransomware

ShinyHunters defaces Cl0p's leak site and claims it grabbed the gang's Tor keys

The extortion crew says it walked out with source code, server logs, and the private keys that identify Cl0p's dark-web address. The fight traces back to a stolen Oracle exploit.

4 min read
Illustration: A dimly lit medical office reception desk at night, empty waiting room chairs visible in the background
Ransomware

Ransomware Group Emperador Claims Attack on Alabama Women's Health Clinic

A fast-moving criminal group listed an Alabama reproductive-health practice on its dark-web site, claiming thousands of employee and patient documents. The practice has not confirmed anything.

3 min read
A Chicago downtown skyline framed through office glass with a laptop in foreground showing healthcare data columns, overlaid with digital lock symbols breaking
Breaches

Veradigm Confirms Patient Data Theft After Vendor Credentials Stolen; Ransomware Crew Claims 3.5 Million Records

The Chicago health-tech firm told the SEC that attackers used a vendor's login to a customer-service API. The Gentlemen ransomware group says it grabbed millions of patient records.

4 min read
A network operations center displaying thousands of WatchGuard firewall devices on a map, critical unpatched devices highlighted in red, ransomware attack alert
Vulnerabilities

Ransomware Crews Now Hitting Unpatched WatchGuard Firewalls, CISA Warns

A critical flaw in WatchGuard Firebox firewalls, patched in December, is now being used in ransomware attacks. Close to 9,000 devices remain exposed online.

3 min read
An Android phone screen showing locked files with a ransom demand popup, aggressive warning screens cycling with alarm-like visuals and hostile messaging design
Threat Intelligence

Mantax Otax: The Android Malware That Locks Your Files, Then Screams At You Until You Pay

Indonesian operators are pushing an unusual Android malware that combines file-locking ransomware with spyware, screen recording and jumpscare harassment tactics designed to bully victims into paying.

4 min read
A courtroom setting with ransomware malware code projected on a screen behind the defendant's area, stolen company data files arranged on evidence tables
Ransomware

Ukrainian Conti Ransomware Member Gets Four Years for Extorting 12 Companies

Oleksii Lytvynenko admitted joining the gang in 2021, coding a malware loader, and holding stolen data from a dozen victims for ransom.

3 min read
A school office setting with computers and filing systems representing student records, with a dark web marketplace or ransom demand notice displayed on a separ
Ransomware

Interlock Ransomware Group Claims Attack on Springfield Public Schools

A criminal ransomware gang has listed a Massachusetts school district on its dark-web pressure site, alleging it stole student records, medical information and staff data. The district has not confirmed any incident.

3 min read
A corporate office dealing with incident recovery—multiple workstations being restored, IT technicians coordinating, backup systems and recovery documentation v
Ransomware

The Ransom Is Usually the Smallest Bill After a Ransomware Attack

Downtime, recovery work and legal fees can dwarf the payment itself. Backup and disaster recovery planning changes the maths.

3 min read
An illustrated digital landscape showing a corporate network perimeter mapped from above like a city, with multiple entry points, devices, and access nodes high
Threat Intelligence

Attack Surface Management Explained

Every device, app, and login point a company exposes is a potential door for criminals. Attack surface management is about mapping all those doors before anyone else does.

3 min read
An office supply warehouse or storage facility with shelves of products, computer monitors showing warning messages on desks in the foreground, and red alert in
Ransomware

Ransomware group 'thegentlemen' claims attack on Sharp Office

A criminal gang has listed Australian office-supplies company Sharp Office on its dark-web site, claiming to have hit the 90-year-old supplier. The company has not confirmed anything, and the claim is unverified.

3 min read
© 2026 Threat Vectr