Ransomware

VanHelsing ransomware RaaS targets multiple platforms

11. marraskuuta 2025 Raportoinut AI AI:n luoma kuva

A new ransomware-as-a-service operation called VanHelsing emerged on March 7, 2025, quickly claiming at least three victims. It supports attacks on Windows, Linux, BSD, ARM, and ESXi systems, with affiliates retaining 80% of ransoms after a $5,000 deposit. The group prohibits targeting entities in the Commonwealth of Independent States.

Experts claim ransomware attacks increasingly target firewalls

Security experts are warning that ransomware attacks are now more frequently targeting firewalls. They advise organizations to secure these critical network defenses promptly. The alert comes amid rising cyber threats.

Ransomware gang NightSpire claims Hyatt data breach

20. tammikuuta 2026 Raportoinut AI

A ransomware group known as NightSpire has claimed responsibility for hacking into Hyatt's systems and stealing data. The group states it has obtained nearly 50GB of files from the hotel chain, which it plans to sell. This incident highlights ongoing cybersecurity threats to the hospitality sector.

Teknologia

Kraken ransomware benchmarks systems before silent encryption

Teknologia

RansomHouse ransomware group leaks Fulgar's confidential files

Teknologia

Kraken ransomware expands to Windows, Linux, and ESXi systems

Malicious AI extension with ransomware sneaks onto VS Code marketplace

A malicious extension generated by AI, featuring ransomware capabilities, has been discovered on Microsoft's official VS Code marketplace. The extension remained available briefly before detection. Developers are urged to exercise caution with marketplace downloads.

CISA alerts on Linux kernel flaw exploited by ransomware

03. marraskuuta 2025 Raportoinut AI

The U.S. Cybersecurity and Infrastructure Security Agency has issued an urgent alert about a critical Linux kernel vulnerability, CVE-2024-1086, now being used by ransomware operators. This flaw allows local privilege escalation and was patched in January 2024. The warning highlights ongoing risks to enterprise systems despite available fixes.

Gunra ransomware exploits Windows and Linux with encryption vulnerabilities

The Gunra ransomware group, active since April 2025, targets both Windows and Linux systems worldwide through platform-specific malware variants. While the Windows version employs secure encryption, the Linux variant suffers from critical weaknesses that allow brute-force decryption. Organizations in regions like South Korea have reported infections, highlighting the group's expanding operations.

New gentlemen's raas advertised on underground forums

29. lokakuuta 2025 Raportoinut AI

Threat actor zeta88 is promoting a new ransomware-as-a-service operation called The Gentlemen's RaaS on hacking forums, targeting Windows, Linux, and ESXi systems. The platform offers affiliates 90 percent of ransom payments and features cross-platform encryption tools developed in Go and C. This development highlights the ongoing commercialization of sophisticated ransomware targeting enterprise environments.

31. joulukuuta 2025 02.53