Ransomware Attacks News

485 stories · Updated every 5 minutes · Page 10 of 13

1. Europe Evolves Into Ransomware's Favorite Region

   darkreading · 25 Jun 2026, 15:30 IST · High severity

   After a global lull, ransomware gangs are setting sights on a rich new arena: attacking EU organizations and their suppliers.

2. Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues

   The Register · 26 Jun 2026, 02:06 IST · High severity

   Security firm Huntress allegedly has a turncoat insider leaking info to a ransomware operation, according to an ex-employee who took his grievances to social media after claiming the security shop tried to “silence” him with legal...

3. Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs

   The Register · 26 Jun 2026, 03:56 IST · Critical severity

   A new self-destructing backdoor called Mistic used in intrusions since April appears to be linked to a criminal gang that compromises corporate networks and then sells that access to ransomware groups, according to security researchers....

4. Almost half of ransomware victims have data stolen before they can even detect an intrusion

   TechRadar · 26 Jun 2026, 00:30 IST · High severity

5. Edge users beware — this malicious extension can break out of the sandbox and install ransomware

   TechRadar · 25 Jun 2026, 19:50 IST · High severity

   Google Chrome app is seen on an iPhone next to Edge and other web browser apps. Microsoft is using new prompts in Edge to try and stop users from downloading Chrome.

6. Major Increase in Ransomware Attacks Targeting Europe, Warns New Report

   Infosecurity Magazine · 25 Jun 2026, 16:15 IST · Critical severity

   Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with supply chain attacks increasing

7. Bajaj Auto says ransomware attack affected its systems and tech subsidiary

   MEDIANAMA · 24 Jun 2026, 12:37 IST · Critical severity

   Bajaj Auto announced on Tuesday that a ransomware attack impacted its systems and those of its wholly owned subsidiary, Bajaj Auto Technology Ltd (BATL). The company has activated response protocols and implemented precautionary...

8. Ransomware attacks grew in 2025 as traditional data breaches fell

   Cybersecurity Dive - Latest News · 24 Jun 2026, 20:43 IST · Critical severity

   In a new report, Bitsight charted a massive surge in internet-exposed AI services.

9. Be on the lookout for Mistic, a new backdoor used by ransomware broker

   CSO Online Security · 25 Jun 2026, 03:50 IST · High severity

   Researchers have identified a new backdoor program that has been used in enterprise intrusions since April and appears to be linked to an initial access broker that sells network footholds to ransomware gangs. Dubbed Mistic by...

10. Indian auto giant Bajaj Auto hit by ransomware incident

    The Record by Recorded Future · 24 Jun 2026, 18:53 IST · High severity

    The company said in a regulatory filing that it became aware of the incident on Tuesday morning and had taken precautionary measures to contain its impact.

11. Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Cyber Espionage

    Infosecurity Magazine · 24 Jun 2026, 17:30 IST · High severity

    An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware

12. New ‘Mistic’ RAT Opens Door to Several Ransomware Families

    SecurityWeek · 24 Jun 2026, 17:12 IST · High severity

    Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta. The post New ‘Mistic’ RAT Opens Door to Several Ransomware Families appeared first on SecurityWeek .

13. Stealthy Mistic backdoor linked to ransomware access broker KongTuke

    BleepingComputer · 24 Jun 2026, 16:11 IST · High severity

    A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, education, IT, and professional services sectors.

14. The Ultimate Ransomware Defense Guide (2026) | UpGuard

    UpGuard Blog · 23 Jun 2026, 01:29 IST · Critical severity

    Learn how to implement an effective security strategy for minimizing the impact of ransomware attacks.

15. Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes

    TechRepublic · 22 Jun 2026, 16:58 IST · High severity

    Prinz Eugen ransomware prioritizes recently modified files and leaves no ransom note on disk, creating new pressure on backup windows, endpoint alerts, and incident response playbooks. The post Prinz Eugen Ransomware Hits Recent Files...

16. Anatomy of a retail ransomware attack: Tabletop simulates modern mayhem methods

    CSO Online Security · 22 Jun 2026, 13:00 IST · Critical severity

    Attacks on AI systems and disinformation starred as key elements of a ransomware tabletop exercise CSO participated in during this month’s Infosecurity Europe conference. The “Enter the War Room” exercise — organised and run by...

17. INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

    The Hacker News · 22 Jun 2026, 11:36 IST · High severity

    A new report from INTERPOL has revealed a "dramatic increase" in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration, new technologies, organized criminal networks, and a disparity in...

18. DragonForce Ransomware Abused Microsoft Teams to Hide Malware Activity

    HackRead · 18 Jun 2026, 18:04 IST · High severity

    DragonForce ransomware abused Microsoft Teams relay systems to hide a custom backdoor, steal files and encrypt systems at a US services firm.

19. Australian sugar producer works to restore operations as ransomware group claims attack

    The Record by Recorded Future · 18 Jun 2026, 19:50 IST · High severity

    Mackay Sugar said it was "working urgently" to verify claims that a highly active ransomware group was behind a cyberattack that shut down harvesting and milling operations.

20. Operation Endgame Disrupts Malware Network Linked to Major Ransomware Gang

    Infosecurity Magazine · 19 Jun 2026, 15:45 IST · High severity

    SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers

21. Threat actor adds advanced ‘EDR killer’ tools to ransomware-as-a-service platform

    CSO Online Security · 20 Jun 2026, 01:37 IST · High severity

    One of the world’s top ransomware groups has given its criminal affiliates access to advanced tools capable of successfully disabling many of today’s enterprise endpoint detection and response (EDR) products, new research by security...

22. INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023

    The Hacker News · 18 Jun 2026, 19:42 IST · High severity

    Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups in 2026, claiming no less than 830 victims since August 2023. "The...

23. Gentlemen ransomware uses multiple EDR killers to disable defenses

    BleepingComputer · 19 Jun 2026, 04:01 IST · High severity

    The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers to help affiliates evade detection in attacks.

24. New Prinz Eugen ransomware prioritizes recent files for encryption

    BleepingComputer · 20 Jun 2026, 20:53 IST · High severity

    A new ransomware operation named 'Prinz Eugen' prioritizes recently modified files for encryption and leaves no ransom note on the system.

25. Microsoft Teams users beware — relays hit by ransomware hackers looking to hide malicious traffic

    TechRadar · 17 Jun 2026, 19:00 IST · High severity

26. Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack

    SecurityWeek · 17 Jun 2026, 16:08 IST · Critical severity

    The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control. The post Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack appeared first on SecurityWeek .

27. DragonForce Ransomware Exploited Microsoft Teams to Hide in Attack Against Major Company

    Infosecurity Magazine · 16 Jun 2026, 17:00 IST · High severity

    Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders

28. Ransomware gang abuses Microsoft Teams relays to hide malicious traffic

    BleepingComputer · 16 Jun 2026, 15:48 IST · High severity

    DragonForce ransomware used a custom malware named 'Backdoor.Turn' to hide command-and-control traffic inside Microsoft Teams relay infrastructure.

29. Cost of ransomware recovery too high? Here’s how to stop footing the bill

    TechRadar · 16 Jun 2026, 15:40 IST · High severity

    https://cdn.mos.cms.futurecdn.net/AHGj6vWuRv2jnHusQUEfHB.jpg

30. Agentic AI Is Raising the Stakes for Healthcare Ransomware Recovery

    TechSpective · 16 Jun 2026, 02:39 IST · High severity

    Healthcare is moving quickly to adopt agentic AI. Systems that can gather information, make decisions, and take action with limited human involvement are beginning to support everything from clinical documentation to administrative...

31. Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer

    SecurityWeek · 15 Jun 2026, 20:45 IST · Critical severity

    Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen. The post Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer appeared first on SecurityWeek .

32. Ukrainian national pleads guilty in connection with Conti ransomware

    Help Net Security · 15 Jun 2026, 18:07 IST · High severity

    A Ukrainian national pleaded guilty to conspiracy to commit wire fraud in connection with the deployment of Conti ransomware, which targeted more than 1,000 victims worldwide. Department of Justice, 44-year-old Oleksii Oleksiyovych...

33. Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges

    SecurityWeek · 15 Jun 2026, 17:03 IST · High severity

    Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang. The post Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges appeared first on SecurityWeek .

34. Extradited Ukrainian Man Admits Role in Conti Ransomware Attacks

    HackRead · 13 Jun 2026, 20:01 IST · Critical severity

    Ukrainian national Oleksii Lytvynenko has pleaded guilty in the US to wire fraud conspiracy linked to Conti ransomware, which hit more than 1,000 victims and generated at least $150 million in ransom payments.

35. Google and FBI warn of ransomware group that sends fake IT workers to hack victims in person

    TechCrunch Security · 05 Jun 2026, 21:37 IST · High severity

    Cybercriminals, part of a gang known as Silent Ransom Group, have sent people pretending to be IT support employees to law firms' offices, where the criminals have stolen data using USB drives or remote access tools.

36. CISA gives US federal agencies three days to fix a VPN bug under attack by a ransomware gang

    TechCrunch Security · 09 Jun 2026, 23:10 IST · High severity

    Check Point said hackers broke into dozens of organizations by exploiting a VPN bug in several of its products used across the government.

37. Extortion-Only Attacks Increase, With Data Theft Dominating Ransomware Claims

    Infosecurity Magazine · 11 Jun 2026, 15:50 IST · High severity

    Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed

38. Ransomware Payment Crypto Laundering Platform Taken Out by FBI and Europol

    Infosecurity Magazine · 12 Jun 2026, 19:30 IST · High severity

    Domain of dark web money laundering platform AudiA6 seized and suspects arrested in joint operation by the FBI, Europol and others

39. The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm

    The Hacker News · 11 Jun 2026, 22:20 IST · High severity

    A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting double extortion attacks, while leveraging resources from various...

40. Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs

    The Hacker News · 12 Jun 2026, 12:08 IST · High severity

    Authorities in Europe have disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs and cybercriminal networks. Europol, in a statement issued Thursday, said the dismantling of AudiA6 cut off a "key financial...