Search for a command to run...
Articles tagged with #ransomware
Summary CRIL came across a blog published by Cisco Talos detailing a significant cyberattack on a critical infrastructure organization involving multiple threat actors. The attack began with an initial access broker (IAB) known as "ToyMaker," assesse...
Summary This advisory analyzes the cyber incident identified at Malaysia Airports Holdings Berhad (MAHB) that impacted operations at Kuala Lumpur International Airport (KLIA) in late March 2025. Recent findings as of April 28, 2025, indicate that the...
Summary Interlock is a ransomware intrusion set first observed in September 2024 that conducts Big Game Hunting and double extortion campaigns. Interlock cannot be classified as a “Ransomware-as-a-Service” (RaaS) group, as no advertisements for recru...
Summary The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) are releasing this joint advisory to disseminate known Medusa ransomware...
Summary On February 20, a Telegram user operating under the handle "ExploitWhispers" released what they claim to be an archive of internal Matrix chat logs belonging to the Black Basta ransomware group. The logs, written in Russian, reportedly detail...
Summary The FunkSec ransomware group first emerged publicly in late 2024, and rapidly gained prominence by publishing over 85 claimed victims—more than any other ransomware group in the month of December. Presenting itself as a new Ransomware-as-a-Se...
