Krebs on Security

MARCH 5, 2024

healthcare giant Change Healthcare has made a $22 million extortion payment to the infamous BlackCat ransomware group (a.k.a. BlackCat is known as a “ransomware-as-service” collective, meaning they rely on freelancers or affiliates to infect new networks with their ransomware. There are indications that U.S.

Healthcare 359

Healthcare Ransomware Scams Government 359

Krebs on Security

FEBRUARY 28, 2025

.” Intrinsec found Prospero has courted some of Russia’s nastiest cybercrime groups, hosting control servers for multiple ransomware gangs over the past two years. A fake browser update page pushing mobile malware. But in September 2017, the Department of Homeland Security (DHS) barred U.S.

Malware 279

Malware Antivirus DDOS Software 279

Malwarebytes

JANUARY 10, 2025

The RansomHub ransomware group claims to have exfiltrated an enormous 1.5 Here, the ransomware group lays blame on the company itself. This isn’t rare for a ransomware group, as the tactics and vernacular are often based around shame, guilt, and a pre-teen-like arrogance.

Ransomware 94

Ransomware Data breaches Passwords Phishing 94

The Last Watchdog

OCTOBER 23, 2024

Cybersecurity training for small businesses is critical, and SMBs should invest in training programs to help employees recognize threats such as phishing attacks, ransomware, and other malicious activities. Regular backups ensure that businesses can recover quickly from ransomware attacks or other data loss incidents.

Small Business 162

Small Business Data breaches Backups Passwords 162

Krebs on Security

NOVEMBER 21, 2024

The feds then obtained records from Virgin Media, which showed the address was leased for several months to Tyler Buchanan , a 22-year-old from Dundee, Scotland. The Spanish police told local media that Buchanan, who allegedly went by the alias “ Tylerb ,” at one time possessed Bitcoins worth $27 million.

Identity Theft 281

Identity Theft Phishing Cryptocurrency Accountability 281

Schneier on Security

SEPTEMBER 4, 2024

A city is the victim of a ransomware attack. They repeatedly lie to the media about the severity of the breach. This story seems straightforward. A security researcher repeatedly proves their statements to be lies. The city gets mad and sues the researcher.

Government 289

Government Media Ransomware 289

SecureWorld News

JULY 8, 2025

Ransomware is no longer the work of lone-wolf hackers with deep technical chops. Ransomware-as-a-Service (RaaS) has transformed cybercrime into an accessible, scalable platform that anyone can tap into—no code required. Explosive growth in ransomware attacks across every industry. The result?

Ransomware 63

Ransomware Cybercrime Phishing Cryptocurrency 63

Security Affairs

MARCH 2, 2025

The Qilin ransomware group claims responsibility for attacking the newspaper Lee Enterprises, stealing 350GB of data. The Qilin ransomware group claimed responsibility for the recent cyberattack on Lee Enterprises, which impacted dozens of local newspapers. is a publicly traded American media company. Lee Enterprises , Inc.

Ransomware 76

Ransomware Cybercrime Encryption Healthcare 76

Zero Day

JUNE 18, 2025

Also: How new Facebook policies incentivize spreading misinformation For the first time this year (the RISJ has released a media report every year since 2012), the No. 1 spot, or the largest proportion of respondents who used a particular source in the past week, went to social media, with 54%. Traditional television claimed the No.

Media 86

Media Password Management Small Business Artificial Intelligence 86

Malwarebytes

JUNE 19, 2025

Take the 184 million logins for social media accounts we reported about recently. But that doesn’t take away from the fact that these credentials are in the hands of cybercriminals who can use them for: Account takeovers : Cybercriminals can use stolen credentials to hijack social media, banking, or corporate accounts.

Identity Theft 136

Identity Theft Passwords Phishing Accountability 136

SecureList

NOVEMBER 29, 2024

More than 90,000 users experienced ransomware attacks. Nearly 18% of all victims published on ransomware gangs’ data leak sites (DLSs) had been hit by RansomHub. According to the UK’s National Crime Agency (NCA), this individual also was behind the infamous Reveton ransomware Trojan spread in 2012 — 2014.

Mobile 105

Mobile Adware Ransomware Malware 105

DoublePulsar

MAY 4, 2025

Theres a piece in The Sunday Times today about the DragonForce ransomware incident at Marks and Spencer which caught my eye. Travelex tried saying the ransomware incident was a technical issue at first. When I covered the Capita ransomware, they paid quietly paid Black Basta early on. This iswrong. Travelex arent alone.

Ransomware 64

Ransomware Backups Government VPN 64

Malwarebytes

MAY 1, 2025

Whereas early phishing scams arrived almost entirely through emails, modern phishing scams can reach victims through malicious websites, text messages, social media, and even mobile app downloads. Social media account hacks are not only a risk to content creatorstheyre a risk to any business with a legitimate online audience.

Small Business 84

Small Business Cybersecurity Scams Passwords 84

Security Affairs

APRIL 7, 2025

This can impact not only the general public but also pose a heightened risk to individuals with significant media exposure, including activists, journalists, and politicians. These EDRs, representing the official cooperation channels between law enforcement agencies and social media platforms, are at risk of becoming a double-edged sword.

Cybercrime 138

Cybercrime Social Engineering Accountability Government 138

Malwarebytes

JUNE 18, 2025

They can profess their empty love to you across your social media apps. They use it to check emails, browse the internet, make phone calls, scroll through social media, and text family and friends. A romance scam, similarly, can start on a social media platform but can move into a messaging service like WhatsApp.

Scams 115

Scams Social Engineering Media Engineering 115

SecureWorld News

JUNE 6, 2025

USB-borne threats are resurging: 13% of threats were introduced via removable media—still a glaring vulnerability in many industrial settings. USB and removable media: The forgotten threat vector Honeywell continues to track high-risk threats delivered via USB devices. OT defenders must plan for: Hybrid threats (e.g.,

Media 97

Media Social Engineering Malware Engineering 97

Krebs on Security

DECEMBER 11, 2024

wtf, and PQHosting ; -sites selling aged email, financial, or social media accounts, such as verif[.]work Sanders said he first encountered some of these services while investigating Kremlin-funded disinformation efforts in Ukraine, as they are all useful in assembling large-scale, anonymous social media campaigns. work and kopeechka[.]store

Cryptocurrency 298

Cryptocurrency Banking Cybercrime Advertising 298

Krebs on Security

SEPTEMBER 30, 2023

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang’s internal operations. It continues: “Prior to deploying the ransomware, Snatch threat actors were observed spending up to three months on a victim’s system.

Ransomware 312

Ransomware Accountability Cybercrime Backups 312

Security Affairs

OCTOBER 13, 2024

The Mexican Drug Cartels Want You Casio: Notice of Partial Service Outage and Information Leak Caused by Ransomware Attack He founded a “startup” to access sanctioned Russian websites: the cyber police of Khmelnytskyi region exposed the hacker Hacked ‘AI Girlfriend’ Data Shows Prompts Describing Child Sexual Abuse Malware Over 300,000!

Data breaches 115

Data breaches Cryptocurrency Cybercrime Artificial Intelligence 115

Joseph Steinberg

JANUARY 20, 2022

A seemingly simple term that appears in pitches sent to me several times a day by cybersecurity product and services vendors that are seeking media exposure. Consider the case of ransomware, for example, and the fact that the number of successful ransomware attacks has skyrocketed in recent years. Zero Trust.

Cybersecurity 363

Cybersecurity Artificial Intelligence Ransomware Social Engineering 363

Krebs on Security

MAY 13, 2024

and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. ” In an October 2013 discussion on the cybercrime forum Exploit , NeroWolfe weighed in on the karmic ramifications of ransomware. Last week, the United States joined the U.K.

Cybercrime 329

Cybercrime Ransomware Accountability Government 329

SecureWorld News

MARCH 31, 2025

In a digital world defined by ransomware, cloud sprawl, and hybrid infrastructures, the ability to recover data quickly and securely is one of the most important indicators of an organization's cyber resilience. Ransomware's bullseye: your backups Cybercriminals know that if they can destroy your backups, they've won.

Backups 103

Backups Encryption Mobile CISO 103

Malwarebytes

NOVEMBER 4, 2024

A ransomware attack against the City of Columbus, Ohio—which drew public scrutiny following the city government’s attempt to silence a researcher who told the public about the attack—has received a little more detail from an unexpected source: The Attorney General for the state of Maine.

Data breaches 109

Data breaches Passwords Phishing Ransomware 109

Malwarebytes

DECEMBER 27, 2024

We started off 2024 with a warning from the British National Cyber Security Centre (NCSC) telling us it expects AI to heighten the global ransomware threat. A lot of AI related stories this year dealt with social media and other public sources that were scraped to train an AI model.

Scams 111

Scams Media Artificial Intelligence Technology 111

Security Affairs

NOVEMBER 10, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime 115

Cybercrime Ransomware Phishing Banking 115

The Last Watchdog

APRIL 16, 2025

Key discoveries from YOBB include Polymorphic Extensions, Browser Ransomware and Browser Syncjacking, all of which have been covered by major publications such as Forbes, Bleeping Computer and Mashable. She is also a published author of The Browser Security Field Manual.

Architecture 147

Architecture Data breaches Ransomware Education 147

Malwarebytes

FEBRUARY 4, 2025

These agents could even hold people for ransom by matching stolen data online with publicly known email addresses or social media accounts, composing messages and holding entire conversations with victims who believe a human hacker out there has access to their Social Security Number, physical address, credit card info, and more.

Artificial Intelligence 142

Artificial Intelligence Small Business Malware Technology 142

Security Affairs

OCTOBER 20, 2024

CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog Nation-state actor exploited three Ivanti CSA zero-days Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’ macOS HM Surf flaw in TCC allows bypass Safari privacy settings Iran-linked actors target critical infrastructure organizations (..)

Data breaches 116

Data breaches Cybercrime Cyber Insurance Marketing 116

Webroot

FEBRUARY 21, 2025

Phishing scams, ransomware attacks, data breaches, and identity theft are part of a growing list of online dangers that are a daily reality. It combines multiple security capabilities into one easy-to-use package that includes: Antivirus protection Detects and neutralizes viruses, malware , spyware , and ransomware.

Antivirus 84

Antivirus Identity Theft Cyber threats Phishing 84

The Last Watchdog

NOVEMBER 19, 2023

That’s largely because the splashy headlines and online buzz created by bringing down the pair of casinos will only motivate more mid-level cybercriminals to follow Scattered Spiders’ model, putting wide-reaching businesses at risk of ransomware attacks due to the rise of ransomware-as-a-service models.

Social Engineering 310

Social Engineering Passwords Authentication Marketing 310

The Last Watchdog

APRIL 7, 2025

Organizations need to take a layered approach to close the gaps before attacks progress deeper into their environments, resulting in events like ransomware and account takeover. Media contact: Emily Brown, REQ on behalf of SpyCloud, ebrown@req.co About SpyCloud: SpyCloud transforms recaptured darknet data to disrupt cybercrime.

Antivirus 113

Antivirus Malware Cybercrime Identity Theft 113

The Last Watchdog

JUNE 30, 2025

SquareX’s industry-first Browser Detection and Response (BDR) solution empowers organizations to proactively detect, mitigate, and threat-hunt client-side web attacks, including malicious browser extensions, advanced spearphishing, browser-native ransomware, genAI DLP, and more. Find out more on www.sqrx.com.

Security Awareness 162

Security Awareness Risk Media Phishing 162

SecureWorld News

APRIL 22, 2025

Attack methodology: a step-by-step breakdown The Elusive Comet campaign begins with cybercriminals impersonating venture capitalists, media representatives, or business partners to lure cryptocurrency professionals into Zoom meetings. Victims are sent unsolicited invitations to join Zoom calls, often via links in phishing emails or messages.

Cryptocurrency 100

Cryptocurrency Social Engineering Cybercrime Engineering 100

Digital Shadows

MARCH 12, 2025

Between September 1, 2024, and February 28, 2025, threat actors ramped up efforts to exploit this sector through spearphishing, impersonation campaigns, ransomware, and vulnerabilities in external remote services. The gambling subsector was hit hardest, followed by the music, media, and tourism industries.

Cyber threats 65

Cyber threats Cryptocurrency IoT Ransomware 65

SecureList

NOVEMBER 29, 2024

Interestingly, Twelve shares infrastructure, utilities and TTPs (Tactics, Techniques and Procedures) with the DARKSTAR ransomware group (formerly known as Shadow or COMET). This includes the use of the ngrok utility for tunneling, Radmin, AnyDesk and PuTTY for remote access, the Shamoon wiper and a leaked version of the LockBit ransomware.

Energy and Utilities 100

Energy and Utilities Ransomware Malware Government 100

The Last Watchdog

FEBRUARY 4, 2025

Malware reverse engineering to combat ransomware: SpyCloud specializes in the tracking and analyzing of malware with deep insights into pervasive infostealers such as Lumma C2 , Redline Stealer, Vidar, and more as they are often a precursor to ransomware. Media contact: Emily Brown, REQ on behalf of SpyCloud, ebrown@req.co

Cybercrime 124

Cybercrime Phishing Accountability Malware 124

Krebs on Security

DECEMBER 29, 2022

That’s a crazy long time for an independent media outlet these days, but then again I’m bound to keep doing this as long as they keep letting me. Tank, seen here performing as a DJ in Ukraine in an undated photo from social media. KrebsOnSecurity turns 13 years old today.

Cryptocurrency 326

Cryptocurrency Cybercrime Computers and Electronics Scams 326