DeadLock Ransomware Group: Tactics, Techniques, and Procedures
DeadLock is a ransomware group first detected in July 2025, known for double extortion tactics and using decentralized infrastructure to enhance operational…
Tag: Ransomware
DeadLock Ransomware: Technical Analysis
DeadLock ransomware uses hybrid cryptography (Curve25519 and XChaCha20), selective encryption, and geofencing. It employs an HTML-based recovery chat that interacts with Polygon…
Lynx Ransomware Overview
Lynx ransomware is a malware family used by the Lynx affiliate program. It has been observed in attacks alongside DeadLock, indicating a…
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks Ravie LakshmananAug 11, 2026Ransomware / Threat Intelligence Cybersecurity and intelligence agencies…
Dragos Reports Rise in Industrial Ransomware
Dragos identified 1,140 ransomware incidents affecting industrial organizations in Q2 2026, a 12% increase from Q1, with manufacturing most affected.
China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw Ravie LakshmananAug 10, 2026Ransomware / Cybercrime Microsoft has disclosed that Storm-1175, a…
Ransom Cartel: Ransomware-as-a-Service Operation
Ransom Cartel is a ransomware-as-a-service operation created by Maksim Silnikau in 2021. It targeted at least 18 companies across the U.S. and…
INC Ransomware Exploits SonicWall SMA 1000 Zero-Days in Widespread Attacks
INC Ransomware has emerged as the dominant threat actor exploiting recently disclosed vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series VPN…
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories Ravie LakshmananJul 30, 2026Hacking News / Cybersecurity News…
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts Swati KhandelwalJul 30, 2026Vulnerability / Web Security South Korean authorities…