JADEPUFFER: Agentic Ransomware Exploiting Langflow Flaw
The first known case of agentic ransomware, codenamed JADEPUFFER, where a human operator deployed an artificial agent to handle the entire extortion…
Tag: Ransomware
Lynx Ransomware Group
A ransomware operation linked to the FortiBleed campaign, with an operator using FortiBleed infrastructure to access negotiation panels and deploy ransomware.
FortiBleed Credential Theft Campaign
A large-scale credential-harvesting operation targeting FortiGate firewalls globally, stealing over 110 million credentials and linked to INC and Lynx ransomware operations.
FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were…
INC Ransomware Group
A ransomware operation linked to the FortiBleed campaign, with an operator using FortiBleed infrastructure to access negotiation panels and deploy ransomware.
Warlock Ransomware: Deployed by Storm-2603 in SharePoint Attacks
Ransomware deployed by threat actor Storm-2603, often exploiting known vulnerabilities in on-premises SharePoint servers. Used in parallel with other techniques to establish…
Velociraptor: Tool Used by Storm-2603 to Blend Malicious Activity
Velociraptor was deployed by Storm-2603 to blend malicious activity with trusted administrative behavior during ransomware attacks.
19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
A 19-year-old alleged member of the Scattered Spider hacking group, Peter Stokes, has been extradited from Finland to the United States to…
MGM Resorts: Victim of Scattered Spider Attack
MGM Resorts was a high-profile victim of a Scattered Spider attack in 2023, which shut down casino and hotel systems.
Caesars Entertainment: Victim of Scattered Spider Attack
Caesars Entertainment was targeted by Scattered Spider in 2023, leading to significant operational disruptions.