Security News

Chinese spies suspected of 'moonlighting' as tawdry ransomware crooks
2025-02-14 02:19

Some employees steal sticky notes, others 'borrow' malicious code A crew identified as a Chinese government-backed espionage group appears to have started moonlighting as a ransomware player –...

Chinese espionage tools deployed in RA World ransomware attack
2025-02-13 14:31

A China-based threat actor, tracked as Emperor Dragonfly and commonly associated with cybercriminal endeavors, has been observed using in a ransomware attack a toolset previously attributed to...

RA World Ransomware Attack in South Asia Links to Chinese Espionage Toolset
2025-02-13 11:58

An RA World ransomware attack in November 2024 targeting an unnamed Asian software and services company involved the use of a malicious tool exclusively used by China-based cyber espionage groups,...

Ransomware isn't always about the money: Government spies have objectives, too
2025-02-12 19:30

Analysts tell El Reg why Russia's operators aren't that careful, and why North Korea wants money AND data Feature Ransomware gangsters and state-sponsored online spies fall on opposite ends of the...

Sarcoma ransomware claims breach at giant PCB maker Unimicron
2025-02-12 19:24

A relatively new ransomware operation named 'Sarcoma' has claimed responsibility for an attack against the Unimicron printed circuit boards (PCB) maker in Taiwan. [...]

Triplestrength hits victims with triple trouble: Ransomware, cloud hijacks, crypto-mining
2025-02-11 20:42

These crooks have no chill A previously unknown gang dubbed Triplestrength poses a triple threat to organizations: It infects victims' computers with ransomware, then hijacks their cloud accounts...

US indicts 8Base ransomware operators for Phobos encryption attacks
2025-02-11 15:42

The U.S. Justice Department announced the names of two Phobos ransomware affiliates arrested yesterday in Thailand, charging them on 11 counts due to their involvement in more than a thousand...

US sanctions LockBit ransomware’s bulletproof hosting provider
2025-02-11 14:24

​The United States, Australia, and the United Kingdom have sanctioned Zservers, a Russia-based bulletproof hosting (BPH) services provider, for supplying essential attack infrastructure for the...

8Base ransomware group leaders arrested, leak site seized
2025-02-11 13:22

The Thai police has arrested four individuals suspected of being the leaders of the 8Base ransomware group and of stealing approximately $16 million from 1,000+ victims they targeted with the...

FBI, Europol, and NCA Take Down 8Base Ransomware Data Leak and Negotiation Sites
2025-02-11 07:03

Source: The Nation A coordinated law enforcement operation has taken down the dark web data leak and negotiation sites associated with the 8Base ransomware gang. Visitors to the data leak site are...