INC Ransomware Exploits SonicWall SMA 1000 Zero-Days in Widespread Attacks
INC Ransomware has emerged as the dominant threat actor exploiting recently disclosed vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series VPN…
Tag: data extortion
Cl0p Affiliates Exploit PTC Windchill and FlexPLM Flaws in Data Extortion Campaign
Threat actors linked to the Cl0p ransomware group are actively exploiting vulnerabilities in internet-exposed PTC Windchill and FlexPLM deployments as part of…
Weekly Cybersecurity Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
This week's cybersecurity landscape is marked by a series of critical threats and vulnerabilities. Progress has urged ShareFile customers to shut down…
Helix: New Data Extortion Group Targeting SharePoint
Helix is a new data extortion group that emerged from the BlackFile and ShinyHunters ecosystem. It uses vishing, device code phishing, and…
Fake Microsoft Entra Passkey Enrollment Used in Voice Phishing Attacks Targeting M365 Users
A sophisticated threat actor tracked as O-UNC-066 by Okta is targeting organizations across multiple sectors with a voice-based phishing (vishing) scheme that…
O-UNC-066: Threat Actor Behind Fake Passkey Vishing Campaign
O-UNC-066 is a threat actor tracked by Okta that has been conducting voice-based phishing attacks targeting Microsoft 365 users. The actor uses…
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
A U.S. government entity paid approximately $1 million to prevent the leak of stolen files, according to a case study by Rakesh…
Kairos: Data-Theft Extortion Group
Kairos is a cyber extortion group that operates without encryption, relying solely on data theft and threats of public exposure. It demanded…
Silent Ransom Group: Pure Data-Theft Extortion
Silent Ransom Group, a Conti offshoot, has conducted pure data-theft extortion against U.S. law and finance firms without using encryptors.
Cl0p Ransomware Group
A ransomware group also known as Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest. Known for exploiting vulnerabilities in enterprise applications for…