Ransomware

VanHelsing ransomware RaaS targets multiple platforms

November 11, 2025 An Ruwaito ta hanyar AI Hoton da AI ya samar

A new ransomware-as-a-service operation called VanHelsing emerged on March 7, 2025, quickly claiming at least three victims. It supports attacks on Windows, Linux, BSD, ARM, and ESXi systems, with affiliates retaining 80% of ransoms after a $5,000 deposit. The group prohibits targeting entities in the Commonwealth of Independent States.

Ransomware gang NightSpire claims Hyatt data breach

A ransomware group known as NightSpire has claimed responsibility for hacking into Hyatt's systems and stealing data. The group states it has obtained nearly 50GB of files from the hotel chain, which it plans to sell. This incident highlights ongoing cybersecurity threats to the hospitality sector.

US cybersecurity professionals plead guilty to blackcat ransomware attacks

December 31, 2025 An Ruwaito ta hanyar AI

Two US-based cybersecurity professionals have pleaded guilty to participating in Blackcat ransomware attacks. Ryan Clifford Goldberg and Kevin Tyler Martin face potential years in prison for their involvement.

Fasaha

RansomHouse ransomware group leaks Fulgar's confidential files

Fasaha

Kraken ransomware expands to Windows, Linux, and ESXi systems

Fasaha

Malicious AI extension with ransomware sneaks onto VS Code marketplace

CISA alerts on Linux kernel flaw exploited by ransomware

The U.S. Cybersecurity and Infrastructure Security Agency has issued an urgent alert about a critical Linux kernel vulnerability, CVE-2024-1086, now being used by ransomware operators. This flaw allows local privilege escalation and was patched in January 2024. The warning highlights ongoing risks to enterprise systems despite available fixes.

CISA warns of ransomware exploiting Linux kernel vulnerability

November 02, 2025 An Ruwaito ta hanyar AI

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about ongoing ransomware attacks targeting a known Linux kernel vulnerability. Federal agencies must update affected systems by November 20 or discontinue their use. The alert highlights that Linux is not immune to such threats, debunking myths about ransomware's decline and Windows as the sole target.

New gentlemen's raas advertised on underground forums

Threat actor zeta88 is promoting a new ransomware-as-a-service operation called The Gentlemen's RaaS on hacking forums, targeting Windows, Linux, and ESXi systems. The platform offers affiliates 90 percent of ransom payments and features cross-platform encryption tools developed in Go and C. This development highlights the ongoing commercialization of sophisticated ransomware targeting enterprise environments.

Report claims fewer firms paying ransomware demands

October 28, 2025 An Ruwaito ta hanyar AI

A new report suggests that ransomware attacks are becoming less successful for cybercriminals, with the number of firms paying ransoms plummeting. This indicates a potential shift in the cybersecurity landscape. The findings highlight that ransomware is not always as effective as it appears.

December 13, 2025 18:43