Nefilim and Hive Ransomware Affiliate Stryzhak Gets 70 Months
October 28, 2026
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the
Ransomware
Nefilim and Hive Ransomware Affiliate Stryzhak Gets 70 Months
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware operations.
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
SOCRadar found seven exposed servers tied to INC and The Gentlemen ransomware affiliates, holding AI chat logs, encryptor builds, credentials and 62 victims.
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024, many in critical infrastructure.
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
Unit 42 says Qilin and INC ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA, then pivot from VPN gateways to VMware vCenter and ESXi ...
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
Rhysida is offering 2.6TB of data it says came from Anne Arundel County, Maryland, for 25 BTC; the county confirms an August 28 attack on ...
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting any files.
MonsterCloud Owner Charged With Secretly Paying Ransoms, $19M Billed
Federal prosecutors charged MonsterCloud owner Zohar Pinhasi with wire fraud, alleging he billed victims over $19 million while secretly paying ransom gangs.
Gentlemen Ransomware Affiliate Used MCP as Command Channel
CloudSEK found Gentlemen RaaS affiliate Azazel using Model Context Protocol as a command channel in live intrusions that hit 24-plus victims in six countries.
UIC College of Medicine Hit by Booba Ransomware, 344 GB Claimed
The University of Illinois Chicago says data was taken from College of Medicine servers; the Booba ransomware gang claims 344 GB stolen from the school.
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
October 22, 2026
SOCRadar found seven exposed servers tied to INC and The Gentlemen ransomware affiliates, holding AI chat logs, encryptor builds, credentials
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
October 21, 2026
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024,
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
October 21, 2026
Unit 42 says Qilin and INC ransomware groups exploit PAN-OS flaw CVE-2026-0257 to bypass MFA, then pivot from VPN gateways
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
October 19, 2026
Rhysida is offering 2.6TB of data it says came from Anne Arundel County, Maryland, for 25 BTC; the county confirms
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
October 13, 2026
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week.
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
October 12, 2026
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting
MonsterCloud Owner Charged With Secretly Paying Ransoms, $19M Billed
October 8, 2026
Federal prosecutors charged MonsterCloud owner Zohar Pinhasi with wire fraud, alleging he billed victims over $19 million while secretly paying
Gentlemen Ransomware Affiliate Used MCP as Command Channel
October 7, 2026
CloudSEK found Gentlemen RaaS affiliate Azazel using Model Context Protocol as a command channel in live intrusions that hit 24-plus
UIC College of Medicine Hit by Booba Ransomware, 344 GB Claimed
October 7, 2026
The University of Illinois Chicago says data was taken from College of Medicine servers; the Booba ransomware gang claims 344
Threat actors
Cybercrime Group Targets Developers with Malicious Telnyx Package on PyPI
March 31, 2026
Cybercrime group associated with Trivy attack uploads malicious Telnyx packages to PyPI aiming to deploy credential-stealing malware.
FBI Seizes LeakBase and Disrupts a Major Cybercrime Forum
March 5, 2026
A recent FBI takedown of the LeakBase cybercrime forum disrupts major online criminal activities.
Texas Sues TP-Link Over Router Security Deception Tied to Chinese State-Backed Hackers
February 19, 2026
Texas accuses TP-Link of falsely advertising its routers’ security, allowing Chinese state-backed hackers to exploit firmware vulnerabilities and acce…
Polish Authorities Detain Suspected Phobos Ransomware Operative
February 18, 2026
Polish authorities have arrested a 47-year-old man suspected of participating in cybercrimes associated with the Phobos ransomware. During the operation,
FBI Successfully Seizes RAMP Cybercrime Forum Disrupting Ransomware Operations
January 29, 2026
The FBI has effectively dismantled RAMP, a prominent cybercriminal forum. Known for its bold promotion of ransomware activities, RAMP’s seizure
NoName057(16) Splinter Cells: Europe’s Volunteer DDoS Threat
January 22, 2026
Decentralized pro-Russian hacktivist cells execute targeted DDoS campaigns across Europe, leveraging volunteer botnets and pre-announced attacks to disrupt governments, banks,
Law Enforcement Identifies Black Basta Ransomware Leader
January 19, 2026
Ukraine and Germany confirm the identity of the Black Basta ransomware leader, now on the Europol and Interpol wanted lists.
Fleeing Ransomware Leader Now Among Germany’s Most Wanted
January 18, 2026
Russian national Oleg Evgenievich Nefekov, involved in major ransomware activities, has evaded capture, reportedly returning to his homeland. German authorities
Stalkerware Vendor’s Guilty Plea: A Rare Legal Victory in Consumer Spyware Prosecution
January 7, 2026
A significant legal breakthrough marks only the second successful prosecution of a consumer spyware vendor in over ten years by
ShinyHunters’ Strategic Use of Decoy Accounts in Cyber Espionage
January 5, 2026
In September 2025, a significant development in the realm of cyber threats emerged with the activities of a hacker group
Arrest Linked to KMSAuto Malware Campaign That Hit 2.8 Million Systems
December 29, 2025
Authorities arrest a Lithuanian individual suspected of deploying clipboard-stealer malware through KMSAuto, impacting 2.8 million computers. The tool, camouflaged as
Ukrainian Nefilim Ransomware Affiliate Pleads Guilty in U.S.
December 22, 2025
Artem Stryzhak, an alleged affiliate of the Nefilim ransomware group, has pleaded guilty to conspiracy to commit computer fraud in
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.