ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories Ravie LakshmananJun 11, 2026Hacking News / Cybersecurity…
Tag: Ransomware
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm Ravie LakshmananJun 11, 2026Cybercrime / Ransomware A new analysis of The…
Europol Dismantles AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Europol, in coordination with international law enforcement, has disrupted AudiA6, a cryptocurrency laundering service that facilitated the washing of over €336 million…
⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More
⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More Ravie LakshmananJun 15, 2026Cybersecurity / Hacking Stuff broke again.…
Vanilla Tempest: Financially Motivated Threat Actor Behind Lorem Ipsum Loader
Vanilla Tempest, also known as Rapid Brigantine, Vice Society, and Vice Spider, is a financially motivated threat actor known for deploying ransomware…
Rhysida Ransomware: Deployed by Vanilla Tempest After Lorem Ipsum Loader
Rhysida is a ransomware family deployed by Vanilla Tempest (Rapid Brigantine) after initial access via Lorem Ipsum Loader. It is the primary…
PLEASE_READ_ME Ransomware Campaign
A ransomware campaign that compromised over 250,000 MySQL databases by brute-forcing weak credentials, highlighting the risk of exposed databases.
MySQL: Open-Source Relational Database
MySQL's AES_ENCRYPT() function was used by JADEPUFFER in the prior campaign to encrypt data in production databases.
Junior Hacker Used Tailscale and OpenSSH to Maintain Persistent Access After C2 Outage
A French-speaking attacker, operating under the handle 'Poisson,' breached a small French automotive business using a keylogger to steal banking and email…
Akira Ransomware: Recent Intrusions Using RustDesk
Akira ransomware has been observed using RustDesk in recent intrusions, highlighting the abuse of legitimate tools for malicious purposes.