Tag

#Symantec

6 stories taggedSymantec.

Illustration: a dim server room with rows of blue indicator lights, one rack door hanging ajar
Ransomware

Warlock keeps hitting SharePoint servers across Latin America and Iberia, Symantec says

The ransomware group is still breaking into Microsoft SharePoint servers in Portuguese and Spanish-speaking countries, hitting hospitals, government offices and schools.

3 min read
A network diagram showing Node
Threat Intelligence

Hackers Are Hiding Malware Inside Node.js, and Windows Sees Nothing Wrong

Symantec says attackers have been abusing the legitimate Node.js runtime since February 2026 to slip past defences at governments, tech firms and hotel chains.

3 min read
Split-screen digital representation showing cryptocurrency exchange data on one side and government email infrastructure on the other, both displaying intrusion
Threat Intelligence

Meet Jewelbug: The Chinese Hacker-for-Hire Group Stealing Crypto and Spying on Governments at the Same Time

A single criminal outfit runs a massive cryptocurrency scam network with one hand and breaks into Middle Eastern government email systems with the other. Researchers say the group almost certainly works for China.

4 min read
Illustration: A dimly lit server room with rows of rack-mounted servers
Ransomware

Spirals ransomware crew locked down an IT firm's network in under a day

A new group broke in through an exposed web server, disabled defences and encrypted files inside 24 hours, Symantec says.

4 min read
Illustration: A dark server room with rows of rack-mounted machines, several status LEDs glowing red instead of green
Ransomware

New 'GodDamn' Ransomware Uses a Rogue Driver to Kill Antivirus Software

Symantec links the May 2026 strain to the older Beast ransomware family, with medium confidence it's a rebrand.

3 min read
Illustration: a modern server rack with blinking amber and red status lights in a darkened data centre
Ransomware

A Microsoft-Approved Driver Is Helping 'GodDamn' Ransomware Gut US Security Tools

A rebranded criminal gang called Hyadina is using a signed Windows driver to kill antivirus software before locking victims' files. The driver carries a legitimate Microsoft stamp, and nobody knows quite how that happened.

3 min read
© 2026 Threat Vectr