-
Ransomware operators are using generative AI to sharpen phishing campaigns, speed up reconnaissance, and identify sensitive corporate information to steal. Zscaler ThreatLabz describes a shift toward faster, more selective extortion, where attackers pr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.
·
A Little Sunshine, Angelo Martino, Aon Cyber Solutions Group, Apros Group, Bill Siegel, Breadcrumbs, Coveware, CyberAcuView, CyberSteward, Cypfer, Cytelligence, Daniel Tobok, Data Breaches, Dharma ransomware, Edward Dubrovsky, FBI, ghostbyte, Intuitive Surgical, Mark Camillo, Matthew Lane, MonsterCloud, Ne’er-Do-Well News, Pepijn van der Stap, PowerSchool, Ransomware, ShinyHunters, Shinywire, The Coming Storm, The Globe and Mail, Unit 221B, Zohar Pinhasi¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Artificial intelligence appeared in ransomware incidents affecting 84% of surveyed victims, while 87% reported attacks targeting or exploiting identity infrastructure. The findings connect accelerated criminal operations with weaknesses in the systems …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ransomware operators are extending their extortion tactics beyond corporate networks by threatening employees’ families and using artificial intelligence to enhance their attacks, according to the Semperis 2026 Ransomware Risk Report. Among the s…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Kimsuky campaign that delivers Funhouse ransomware through a malicious Hangul document disguised as a resume. The operation combines embedded OLE objects, sequential scripts, a Python backdoor, and Quasar RAT, linking the September 2026 activity to e…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The DOJ accuses MonsterCloud CEO Zohar Pinhasi of secretly paying ransomware gangs for decryption keys while charging victims…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle “Rey,” was detained as ShinyHunters was in the process of extorting a business unit recently divested by the global aerospace company Boeing, which manufactures the fleet of planes used by the employer of Rey’s father…
·
A Little Sunshine, Accenture, Benjamin Korper, Boeing, Cl0p, CVE-2026-35273, Data Breaches, FBI, Google Threat Intelligence Group, Jeppesen ForeFlight, Mandiant, Ne’er-Do-Well News, Neo Security, Oracle, PeopleSoft, Pepijn van der Stap, Ransomware, Reuters, Royal Jordanian Airlines, Saif Al-Din Khader, ShinyHunters, The Coming Storm, Umbreon¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI coding assistant’s tool interface into an operational command-and-control channel. CloudSEK identified the…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
