RansomHub

LockBit (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor LockBit (Malware Family)

The Godfather of Ransomware? Inside DragonForce’s Cartel Ambitions

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Godfather of Ransomware? Inside DragonForce’s Cartel Ambitions

Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Two Americans Plead Guilty to Targeting Multiple U.S. Victims Using ALPHV BlackCat Ransomware

When the Defenders Become the Attackers: Cybersecurity Experts Indicted for BlackCat Ransomware Operations

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor When the Defenders Become the Attackers: Cybersecurity Experts Indicted for BlackCat Ransomware Operations

Qilin Ransomware-as-a-Service: Threat Analysis and Strategic Outlook

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Qilin Ransomware-as-a-Service: Threat Analysis and Strategic Outlook

TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

Malpedia library date Julien DUGAY fromORKL

Archived copy on ORKL Detailsfor TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

Hide Your RDP: Password Spray Leads to RansomHub Deployment

publisher's date The DFIR Report fromDFIR Report

Detailsfor Hide Your RDP: Password Spray Leads to RansomHub Deployment

Cyber%20Threat%20Intelligence%20Report%202025.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cyber%20Threat%20Intelligence%20Report%202025.pdf

Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Defending Against UNC3944: Cybercrime Hardening Guidance from the Frontlines

m-trends-2025-en.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor m-trends-2025-en.pdf

Tracking Adversaries: EvilCorp, the RansomHub affiliate

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tracking Adversaries: EvilCorp, the RansomHub affiliate

TLP-CLEAR-From-espionage-to-PsyOps-Tracking-operations-and-infrastructure-of-UACs-in-2025-EN-1.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TLP-CLEAR-From-espionage-to-PsyOps-Tracking-operations-and-infrastructure-of-UACs-in-2025-EN-1.pdf

SocGholishs Intrusion Techniques Facilitate Distribution of RansomHub Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor SocGholishs Intrusion Techniques Facilitate Distribution of RansomHub Ransomware

TRACKING RANSOMWARE - FEBRUARY 2025 - CYFIRMA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TRACKING RANSOMWARE - FEBRUARY 2025 - CYFIRMA

2025ThreatDetectionReport_RedCanary.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 2025ThreatDetectionReport_RedCanary.pdf

Tracking Pyramid C2: Identifying Post-Exploitation Servers in Hunt

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Tracking Pyramid C2: Identifying Post-Exploitation Servers in Hunt

RansomHub never sleeps episode 1 | Group-IB Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RansomHub never sleeps episode 1 | Group-IB Blog

TRACKING RANSOMWARE : JANUARY 2025 - CYFIRMA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TRACKING RANSOMWARE : JANUARY 2025 - CYFIRMA

threat_horizons_report_h1_2025.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor threat_horizons_report_h1_2025.pdf

Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latrodectus

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Inside Intelligence Center: LUNAR SPIDER Enabling Ransomware Attacks on Financial Sector with Brute Ratel C4 and Latrodectus

Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware

How Ransomhub Ransomware Uses EDRKillShifter to Disable EDR and Antivirus Protections

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor How Ransomhub Ransomware Uses EDRKillShifter to Disable EDR and Antivirus Protections

CosmicBeetle steps up: Probation period at RansomHub

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CosmicBeetle steps up: Probation period at RansomHub

#StopRansomware: RansomHub Ransomware

file creation date fromORKL

Archived copy on ORKL Detailsfor #StopRansomware: RansomHub Ransomware

Ransomware Review: First Half of 2024

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Review: First Half of 2024

Analyzing the Shift in Ransomware Dynamics: The Impact of Law Enforcement and Future Outlooks

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Analyzing the Shift in Ransomware Dynamics: The Impact of Law Enforcement and Future Outlooks

Insights on Cyber Threats Targeting Users and Enterprises in Brazil

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Insights on Cyber Threats Targeting Users and Enterprises in Brazil

IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment

publisher's date The DFIR Report fromORKLDFIR Report

Archived copy on ORKL Detailsfor IcedID Brings ScreenConnect and CSharp Streamer to ALPHV Ransomware Deployment

Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Exmatter malware levels up: S-RM observes new variant with simultaneous remote code execution and data targeting

RansomHub: New Ransomware has Origins in Older Knight

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor RansomHub: New Ransomware has Origins in Older Knight

Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit

The Anatomy of an ALPHA SPIDER Ransomware Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Anatomy of an ALPHA SPIDER Ransomware Attack

Scattered Spider laying new eggs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Scattered Spider laying new eggs

Malware in the wild book.

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware in the wild book.

BlackCat plays with malvertising traps to lure corporate victims

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat plays with malvertising traps to lure corporate victims

Scattered Spider | CISA

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Scattered Spider | CISA

Nitrogen Campaign 2.0: Reloads with Enhanced Capabilities Leading to ALPHV/BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Nitrogen Campaign 2.0: Reloads with Enhanced Capabilities Leading to ALPHV/BlackCat Ransomware

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction | Microsoft Security Blog

CERTFR-2023-CTI-007.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor CERTFR-2023-CTI-007.pdf

FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware

Malware analysis report: BlackCat ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Malware analysis report: BlackCat ransomware

BlackCat Ransomware Deploys New Signed Kernel Driver

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware Deploys New Signed Kernel Driver

March 2023 broke ransomware attack records with 459 incidents

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor March 2023 broke ransomware attack records with 459 incidents

ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access | Mandiant

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV Ransomware Affiliate Targets Vulnerable Backup Installations to Gain Initial Access | Mandiant

1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 1%20-Microsoft%20Cobalt%20Strike%20-%20Complaint(907040021.9).pdf

BlackCat Ransomware: Tactics and Techniques From a Targeted Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware: Tactics and Techniques From a Targeted Attack

DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor DEV-0832 (Vice Society) opportunistic ransomware campaigns impacting US education sector | Microsoft Security Blog

Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Noberus Ransomware: Darkside and BlackMatter Successor Continues to Evolve its Tactics

ALPHV/BlackCat ransomware family becoming more dangerous

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV/BlackCat ransomware family becoming more dangerous

Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Crimeware Trends | Ransomware Developers Turn to Intermittent Encryption to Evade Detection

TTPs Associated With a New Version of the BlackCat Ransomware - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TTPs Associated With a New Version of the BlackCat Ransomware - SecurityScorecard

The Increase in Ransomware Attacks on Local Governments - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The Increase in Ransomware Attacks on Local Governments - SecurityScorecard

A Deep Dive Into ALPHV/BlackCat Ransomware - SecurityScorecard

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Deep Dive Into ALPHV/BlackCat Ransomware - SecurityScorecard

BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware: Tactics, Techniques & Mitigation Strategies

Common-TTPs-of-the-modern-ransomware_low-res.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Common-TTPs-of-the-modern-ransomware_low-res.pdf

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

The many lives of BlackCat ransomware | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor The many lives of BlackCat ransomware | Microsoft Security Blog

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups: Ransomware in Q1 2022

LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor LockBit, Conti, and BlackCat Lead Pack Amid Rise in Active RaaS and Extortion Groups

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Ransomware as a service: Understanding the cybercrime gig economy and how to protect yourself | Microsoft Security Blog

German wind farm operator confirms cybersecurity incident

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor German wind farm operator confirms cybersecurity incident

20220427_NP_TLPWHITE_ANSSI_FIN7.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor 20220427_NP_TLPWHITE_ANSSI_FIN7.pdf

Microsoft Word - Blackcat_FLASH_FINAL 04192022

Malpedia library date GESYEII fromORKL

The original link failed its last check. Original publisher Detailsfor Microsoft Word - Blackcat_FLASH_FINAL 04192022

An Investigation of the BlackCat Ransomware via Trend Micro Vision One

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor An Investigation of the BlackCat Ransomware via Trend Micro Vision One

RedSense

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor RedSense

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

A Bad Luck BlackCat

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor A Bad Luck BlackCat

TR_BlackCat_Report.pdf

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TR_BlackCat_Report.pdf

Falcon OverWatch Contributes to BlackCat Protection | CrowdStrike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Falcon OverWatch Contributes to BlackCat Protection | CrowdStrike

From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor From BlackMatter to BlackCat: Analyzing two attacks from one affiliate

The Ransomware Threat Landscape: What to Expect in 2022

Malpedia library date fromORKL

The original link failed its last check. Original publisher Detailsfor The Ransomware Threat Landscape: What to Expect in 2022

Cybereason vs. BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Cybereason vs. BlackCat Ransomware

BlackCat ransomware implicated in attack on German oil companies

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat ransomware implicated in attack on German oil companies

Who Wrote the ALPHV/BlackCat Ransomware Strain?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Who Wrote the ALPHV/BlackCat Ransomware Strain?

Threat Assessment: BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Threat Assessment: BlackCat Ransomware

ALPHV ransomware gang analysis

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor ALPHV ransomware gang analysis

BlackCat Ransomware (ALPHV)

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware (ALPHV)

BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat Ransomware | Highly-Configurable, Rust-Driven RaaS On The Prowl For Victims

Noberus: Technical Analysis Shows Sophistication of New Rust-based Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Noberus: Technical Analysis Shows Sophistication of New Rust-based Ransomware

BlackCat : New Rust based ransomware borrowing BlackMatter’s configuration

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat : New Rust based ransomware borrowing BlackMatter’s configuration

GitHub - f0wl/blackCatConf: Configuration Extractor for BlackCat Ransomware

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor GitHub - f0wl/blackCatConf: Configuration Extractor for BlackCat Ransomware

BlackCat, ALPHV

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor BlackCat, ALPHV

Blog Archive - SpamTitan Email Security

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Blog Archive - SpamTitan Email Security