Malware & Ransomware
CloudSEK and Checkmarx Identify MALFEX Campaign Pushing RATs via npm
Researchers attribute eight malicious npm packages delivering the Overlord RAT and stealers to a single threat actor since August 2023.
Malware & Ransomware
Malware & Ransomware
MonsterCloud CEO Charged With Fraud Over Secret Ransomware Payments
The executive behind ransomware recovery firm MonsterCloud faces charges for allegedly paying attackers to decrypt data while claiming to use proprietary technology.
Malware & Ransomware
MonsterCloud Owner Charged With Secretly Paying Ransom Demands To Attackers
Federal authorities accuse Zohar Pinhasi of defrauding clients by paying ransomware gangs while billing them exorbitant recovery fees.
Malware & Ransomware
ESET Researchers Trace MATCHBOIL Malware Used by Russia-Aligned Group in Ukraine
Security firm ESET has documented the evolution of MATCHBOIL, a downloader used by the UAC-0099 threat group to install spying backdoors on Windows systems in Ukraine.
Malware & Ransomware
Ransomware Recovery Scheme Used Fake Tools to Markup $11M in Payments
An investigation reveals a fraudster paid ransoms for decryption keys, then charged victims significantly more for remediation services using fake tools.
Malware & Ransomware
Rapid7 VP Explains BPFDoor Backdoor Targets Network Edge Devices
Christiaan Beek of Rapid7 Intelligence discusses how the BPFDoor malware uses magic packets to evade detection on mail gateways and telecom infrastructure.
Malware & Ransomware
Nikon Small World in Motion video disqualified for AI use; new winner named
A winning video entry was disqualified after organizers determined it used artificial intelligence, prompting a reassignment of the top prize to a Vietnamese researcher.
Malware & Ransomware
Japan Extradites Russian National to Germany Over Qilin Ransomware Allegations
Japanese authorities confirmed the arrest and transfer of a suspect linked to the Qilin ransomware group, marking a significant international law enforcement action.
Malware & Ransomware
How the Ransomware Attack Chain Works: Mapping the Kill Chain
Ransomware succeeds because defenders monitor for file encryption, while attackers spend most of their time moving laterally to find backup credentials before any data changes occur.
Malware & Ransomware
Recovery Point Objective: Why Data Gaps Drive Ransomware Success
Recovery point objective defines the maximum acceptable data loss window, forcing teams to accept financial trade-offs between storage costs and business continuity risks.
Malware & Ransomware
Virus vs Malware: Defining the Difference in Scope and Behavior
A computer virus is a specific replication method, while malware is the broad category of all hostile software that includes viruses, worms, and trojans.
Malware & Ransomware
Firmware Malware: How to Detect and Remove Persistent Threats
Firmware malware resides below the operating system, allowing it to survive disk wipes, OS reinstalls, and even hardware swaps by persisting in the device's read-only memory layers.
Malware & Ransomware
FBI adds Venezuelan cartel malware leader to 10 Most Wanted Fugitives list
The FBI has designated the alleged head of a cybercriminal unit within the Tren de Aragua cartel as one of its top ten most wanted fugitives for ATM jackpotting.
Malware & Ransomware
Germany Arrests Alleged Qilin Ransomware Leader After Japan Extradition
Authorities in Germany have detained a Russian national suspected of being a key member of the Qilin ransomware group following his extradition from Japan.
Malware & Ransomware
ESET Research Tracks MATCHBOIL Downloader Evolution by UAC-0099
ESET Research details how the MATCHBOIL downloader, linked to threat actor UAC-0099, has evolved its tactics between 2024 and 2026.
Malware & Ransomware
How Malicious PyPI Packages Infiltrate Python Environments
Trace the exact path from package upload to execution, identifying the specific trust gaps attackers exploit and where you can break the chain.
Malware & Ransomware
Russia-Aligned UAC-0099 Advances MATCHBOIL Malware Capabilities Since 2024
Intelligence reports indicate that the Russia-aligned threat group UAC-0099 has been steadily upgrading its MATCHBOIL downloader malware throughout 2024.
Malware & Ransomware
UAC-0099 Targets Ukrainian Officials With New ASHVEIN RAT and .NET Infostealer
Analysis reveals a Russia-aligned group using the previously undocumented ASHVEIN malware to compromise Ukrainian government personnel, hiding commands in HTML.
Malware & Ransomware
FakeGit Campaign Reactivates on GitHub, Distributing SmartLoader Malware via 17,000 Repos
The FakeGit malware campaign has returned, using over 17,600 fake GitHub repositories to distribute SmartLoader and the StealC infostealer to unsuspecting developers.
Malware & Ransomware
Cisco Talos details malware techniques designed to evade automated AI analysis
Cisco Talos researchers describe how malware authors are developing specific methods to obstruct automated AI security tools.
Malware & Ransomware
Nightspire Leads Ransomware Leak Claims with 9 Incidents in 24-Hour Period
Our analysis of public data shows 31 unverified ransomware leak-site claims in the last day, with Nightspire accounting for nearly one-third of the total activity.
Malware & Ransomware
Ransomware Tracker: 18 New Leak-Site Claims in 24 Hours, Safepay Leads
Our daily count of ransomware leak-site activity for October 1, 2026: which groups were busiest and where the claimed victims are.