Threat Intelligence
VanHelsing ransomware RaaS targets multiple platforms
Iniulat ng AI Larawang ginawa ng AI
A new ransomware-as-a-service operation called VanHelsing emerged on March 7, 2025, quickly claiming at least three victims. It supports attacks on Windows, Linux, BSD, ARM, and ESXi systems, with affiliates retaining 80% of ransoms after a $5,000 deposit. The group prohibits targeting entities in the Commonwealth of Independent States.
The Crypto ISAC has announced an expanded integration with Coinbase to share real-time threat intelligence with its members. This partnership aims to provide actionable data on risks like illicit crypto transactions. The move highlights the unique cybersecurity needs of the blockchain industry.
Iniulat ng AI
Threat actor zeta88 is promoting a new ransomware-as-a-service operation called The Gentlemen's RaaS on hacking forums, targeting Windows, Linux, and ESXi systems. The platform offers affiliates 90 percent of ransom payments and features cross-platform encryption tools developed in Go and C. This development highlights the ongoing commercialization of sophisticated ransomware targeting enterprise environments.