Ransomware

VanHelsing ransomware RaaS targets multiple platforms

November 11, 2025 Ti AI ṣe iroyin Àwòrán tí AI ṣe

A new ransomware-as-a-service operation called VanHelsing emerged on March 7, 2025, quickly claiming at least three victims. It supports attacks on Windows, Linux, BSD, ARM, and ESXi systems, with affiliates retaining 80% of ransoms after a $5,000 deposit. The group prohibits targeting entities in the Commonwealth of Independent States.

Experts claim ransomware attacks increasingly target firewalls

Security experts are warning that ransomware attacks are now more frequently targeting firewalls. They advise organizations to secure these critical network defenses promptly. The alert comes amid rising cyber threats.

Ransomware gang NightSpire claims Hyatt data breach

January 20, 2026 Ti AI ṣe iroyin

A ransomware group known as NightSpire has claimed responsibility for hacking into Hyatt's systems and stealing data. The group states it has obtained nearly 50GB of files from the hotel chain, which it plans to sell. This incident highlights ongoing cybersecurity threats to the hospitality sector.

Technology

Kraken ransomware benchmarks systems before silent encryption

Technology

RansomHouse ransomware group leaks Fulgar's confidential files

Technology

Kraken ransomware expands to Windows, Linux, and ESXi systems

Malicious AI extension with ransomware sneaks onto VS Code marketplace

A malicious extension generated by AI, featuring ransomware capabilities, has been discovered on Microsoft's official VS Code marketplace. The extension remained available briefly before detection. Developers are urged to exercise caution with marketplace downloads.

CISA alerts on Linux kernel flaw exploited by ransomware

November 03, 2025 Ti AI ṣe iroyin

The U.S. Cybersecurity and Infrastructure Security Agency has issued an urgent alert about a critical Linux kernel vulnerability, CVE-2024-1086, now being used by ransomware operators. This flaw allows local privilege escalation and was patched in January 2024. The warning highlights ongoing risks to enterprise systems despite available fixes.

Gunra ransomware exploits Windows and Linux with encryption vulnerabilities

The Gunra ransomware group, active since April 2025, targets both Windows and Linux systems worldwide through platform-specific malware variants. While the Windows version employs secure encryption, the Linux variant suffers from critical weaknesses that allow brute-force decryption. Organizations in regions like South Korea have reported infections, highlighting the group's expanding operations.

New gentlemen's raas advertised on underground forums

October 29, 2025 Ti AI ṣe iroyin

Threat actor zeta88 is promoting a new ransomware-as-a-service operation called The Gentlemen's RaaS on hacking forums, targeting Windows, Linux, and ESXi systems. The platform offers affiliates 90 percent of ransom payments and features cross-platform encryption tools developed in Go and C. This development highlights the ongoing commercialization of sophisticated ransomware targeting enterprise environments.

December 31, 2025 02:53