Malware & Ransomware
Malware families, campaigns, payloads, TTPs, botnets and ransomware operations.
-
MalwareTen Years After Mirai Took Down Dyn, the Botnets Have Moved Into TVs and Cars
At 11:10 UTC on October 21, 2016, the DNS provider Dyn began absorbing a flood of TCP and…
-
MalwareQuieter DarkSword Variant Steals iPhone Keychains and Crypto Wallet Data on the Device
The iPhone that gave P7 DarkSword away belonged to a customer of the mobile security firm…
-
MalwareFake Job Interviews Infected 30,000 Developer Machines for North Korea, Agencies Say
The job offer looks real. The company has a website, the recruiter is friendly, and the…
-
MalwareThousands of Small Business Sites Now Pull Fake CAPTCHA Malware From a Blockchain
A visitor loads the website of a local clinic or a plumbing firm, and the page blurs. A…
-
MalwareAftermarket Android Car Stereos Were Fed Botnet Malware Through Their Own Updater
Car infotainment units have joined the list of devices that criminals quietly rent out as…
-
MalwareNew Mac Malware AmnesiaStealer Lets Attackers Drive a Victim's Logged In Browser
The page looks like GitHub, down to the dark theme and a badge that says the publisher is…
-
MalwareAI-Built Ransomware Toolkit Automates Active Directory Recon and EDR Evasion
Cyberattackers have been utilizing AI-generated ransomware attack toolkits. These…
-
MalwareAryStinger Malware Turns Aging Home Routers Into a Hidden Reconnaissance Network
In terms of functionality (not impact) the AryStinger campaign uses previously unknown…
-
MalwareStealthy Mistic Backdoor Gives Ransomware Brokers Long-Term Network Access
Although the information regarding these events is based upon publicly available sources…
-
MalwareMalicious AUR Packages Hit Arch Linux With a Credential Stealer and Kernel Rootkit
More than 400 packages in the Arch User Repository (AUR) are currently being distributed…
-
MalwareThe Gentlemen Rapidly Rises to Ransomware Prominence
The "Gentlemen", a ransomware gang, has established themselves in a relatively short…
-
Malware2026: The Year of AI-Assisted Attacks
On December 4, 2025, a Japanese police agency made an arrest in Osaka under Japan's…
-
MalwareSSHStalker botnet attacks 7,000 Linux systems with brute force
A newly identified botnet is compromising poorly secured Linux servers by brute-forcing…
-
Malware13 Methods Attackers Use Generative AI to Compromise Your Systems
Artificial intelligence is transforming the technology sector, and this shift is also…
-
MalwareA Decade of Ransomware Havoc: The Financial Impact
IoT for All reports that ransomware has transformed over the past decade from a minor…
-
MalwareTop 10 Ransomware Incidents of the Past Year
By 2025, ransomware transitioned from being an isolated IT issue to a systemic threat…
-
MalwareGlobal Ransomware Damage Predicted to Reach $74 Billion by 2026
Industry analysts have compiled detailed global predictions for ransomware damage costs…
-
MalwareRansomware Among the Top 10 AI Threats in 2026
ZDNet has recently highlighted crucial insights in their article, "10 ways AI can inflict…
-
MalwareRansomware endangers SMBs; cyberinsurance may not provide financial protection.
Cybercriminals are shifting their focus away from large enterprises, increasingly…
-
MalwareRansomware Targets Hospitals Both on TV and in Real Life
This past week, ransomware attacks on hospitals captured significant media attention…
-
MalwareSeizure of the RAMP forum disrupts the ransomware underworld.
As one ransomware community, RAMP, closes its doors, two new forums have emerged to fill…
-
MalwareAeternum Botnet Moves Command Control to Polygon Blockchain
A newly discovered botnet loader is now moving its command-and-control (C2) operations…
-
MalwareNorth Korea's APT37 Enhances Tools to Infiltrate Air-Gapped Networks
A cyber espionage group associated with North Korea has been detected executing a new…
-
MalwareRansomware Payments Drop 8% Despite 50% Increase in Attacks
Ransomware actors are now demanding larger payments from a smaller pool of victims…
-
MalwareIranian Cyber Group Launches AI-Driven Attack on Iraqi Government Officials
A cyber threat group with ties to Iran has recently targeted government officials in Iraq…