Security News

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws
2025-01-16 06:45

Cybersecurity researchers have detailed an attack that involved a threat actor utilizing a Python-based backdoor to maintain persistent access to compromised endpoints and then leveraged this...

UK Considers Banning Ransomware Payments
2025-01-15 16:19

The proposed mandate intends to discourage criminals from targeting critical national infrastructure and public services, as there will be no financial motivation.

UK floats ransomware payout ban for public sector
2025-01-14 11:04

Stronger proposals may also see private sector applying for a payment 'license' A total ban on ransomware payments across the public sector might actually happen after the UK government opened a...

OneBlood confirms personal data stolen in July ransomware attack
2025-01-13 22:36

Blood-donation not-for-profit OneBlood confirms that donors' personal information was stolen in a ransomware attack last summer. [...]

Attackers are encrypting AWS S3 data without using ransomware
2025-01-13 16:59

A ransomware gang dubbed Codefinger is encrypting data stored in target organizations’ AWS S3 buckets with AWS’s server-side encryption option with customer-provided keys (SSE-C), and asking for...

Ransomware abuses Amazon AWS feature to encrypt S3 buckets
2025-01-13 15:27

A new ransomware campaign encrypts Amazon S3 buckets using AWS's Server-Side Encryption with Customer Provided Keys (SSE-C) known only to the threat actor, demanding ransoms to receive the...

Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days
2025-01-13 14:00

'Codefinger' crims on the hunt for compromised keys A new ransomware crew dubbed Codefinger targets AWS S3 buckets and uses the cloud giant's own server-side encryption with customer provided keys...

Ransomware on ESXi: The mechanization of virtualized attacks
2025-01-13 11:30

In 2024, ransomware attacks targeting VMware ESXi servers reached alarming levels, with the average ransom demand skyrocketing to $5 million. With approximately 8,000 ESXi hosts exposed directly...

US charges operators of cryptomixers linked to ransomware gangs
2025-01-10 17:59

The U.S. Department of Justice indicted three operators of sanctioned Blender.io and Sinbad.io crypto mixer services used by ransomware gangs and North Korean hackers to launder ransoms and stolen...

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics
2025-01-10 11:58

Cybersecurity researchers have shed light on a nascent artificial intelligence (AI) assisted ransomware family called FunkSec that sprang forth in late 2024, and has claimed more than 85 victims...