Ransomware Attacks News

483 stories · Updated every 5 minutes · Page 8 of 13

1. Microsoft discovers new multi-malware package 'GigaWiper' capable of deploying wipers and ransomware

   TechRadar · 10 Jul 2026, 22:20 IST · High severity

   Microsoft discovers new multi-malware package 'GigaWiper' capable of deploying wipers and ransomware

2. In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops

   SecurityWeek · 10 Jul 2026, 20:31 IST · High severity

   Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO. The post In Other News: DHS Database Hacked, Adobe Boosts Patch...

3. Florida ransomware negotiator convicted for helping ransomware gang extort US companies

   TechCrunch · 10 Jul 2026, 19:41 IST · High severity

   A third ransomware negotiator has been jailed for helping a notorious ransomware group to extort American victim companies into paying the hackers.

4. New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections

   Infosecurity Magazine · 10 Jul 2026, 18:30 IST · High severity

   GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver

5. Third US Security Expert Sentenced to Prison for Helping Ransomware Gang

   SecurityWeek · 10 Jul 2026, 18:28 IST · High severity

   Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group. The post Third US Security Expert Sentenced to Prison for Helping Ransomware Gang appeared first on SecurityWeek .

6. Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clients

   IT Pro · 10 Jul 2026, 15:16 IST · High severity

   Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clients

7. Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks

   The Hacker News · 10 Jul 2026, 13:40 IST · High severity

   A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for their role in conspiring with the now-defunct BlackCat ransomware operators to extort multiple victims and...

8. Former ransomware negotiator gets 4 years for BlackCat attacks

   BleepingComputer · 10 Jul 2026, 13:47 IST · Critical severity

   A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.

9. OTX Threat: CitrixBleed 2 (CVE-2025-5777) 7 Steps to Dragonforce Ransomware

   AlienVault OTX · 09 Jul 2026, 18:50 IST · High severity

   Between January and June 2026, multiple unrelated organizations experienced nearly identical intrusions following a standardized seven-step attack chain. The attacks exploited CitrixBleed 2 (CVE-2025-5777), a memory-overread...

10. OTX Threat: GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses

    AlienVault OTX · 09 Jul 2026, 18:23 IST · High severity

    GodDamn ransomware represents the third iteration of ransomware developed by Hyadina, following Monster (2022) and Beast (2024). A recent attack in June 2026 demonstrates sophisticated tactics including AnyDesk for remote access,...

11. New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

    The Hacker News · 09 Jul 2026, 23:38 IST · High severity

    Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from. Each...

12. Ransomware ecosystem grows, but ‘four-headed monster’ dominates

    Cybersecurity Dive - Latest News · 09 Jul 2026, 20:05 IST · High severity

    AI is helping hackers, a new report finds, but mostly by automating very human behaviors.

13. Latvian forestry company still restoring systems weeks after ransomware attack

    The Record by Recorded Future · 09 Jul 2026, 19:50 IST · Critical severity

    A foreign, financially motivated group was responsible for a cyberattack on state-owned forestry company Latvijas Valsts Mezi (LVM), officials said.

14. GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

    The Hacker News · 09 Jul 2026, 16:13 IST · High severity

    Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the...

15. Mount Royal University Confirms Data Stolen in Ransomware Attack

    SecurityWeek · 09 Jul 2026, 15:36 IST · Critical severity

    Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data. The post Mount Royal University Confirms Data Stolen in Ransomware Attack appeared first on SecurityWeek .

16. 'GodDamn' Ransomware Uses BYOVD to Smite US Companies

    darkreading · 09 Jul 2026, 15:30 IST · Critical severity

    Microsoft co-signed a malicious kernel driver, and now it's being used to kill security software in ransomware attacks.

17. Smashing Security podcast #475: JadePuffer – the AI that ran a ransomware attack all by itself

    Graham Cluley · 09 Jul 2026, 04:49 IST · Critical severity

    A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack,...

18. Experts warn of the 'first documented case of agentic ransomware' — dangerous JADEPUFFER attack run entirely by an LLM

    TechRadar · 08 Jul 2026, 23:45 IST · High severity

    Christian Cawley has extensive experience as a writer and editor in consumer electronics, IT and entertainment media. He has contributed to TechRadar since 2017 and has been published in Computer Weekly, Linux Format, ComputerActive,...

19. This latest frightening ransomware attack was orchestrated entirely by an LLM

    Fast Company Tech · 08 Jul 2026, 14:30 IST · Critical severity

    Typically, when hackers attempt to break into a system, they have to retrace steps and make incremental changes time and again. A new campaign called JadePuffer, run entirely by AI , instead works autonomously, finding unexplored...

20. DeepSeek accidentally built a working ransomware strain, experts note, 'What we are witnessing is a fundamental shift in how novel cyber attacks are born'

    TechRadar · 08 Jul 2026, 06:50 IST · High severity

    Efosa has been writing about technology for over 7 years, initially driven by curiosity but now fueled by a strong passion for the field. He holds both a Master's and a PhD in sciences, which provided him with a solid foundation in...

21. 'It’s a marker of where extortion tradecraft is heading': Cyber experts say they've identified the first case of ‘agentic ransomware’ – but there’s a catch

    IT Pro · 07 Jul 2026, 19:10 IST · High severity

    Nicole Kobie first started writing for ITPro in 2007. As a freelance journalist covering technology and business, Nicole's work includes bylines in New Scientist, Wired, PC Pro and many more. Nicole the author of a book about the...

22. The first AI-run ransomware attack still needed a human

    TechCrunch Security · 07 Jul 2026, 05:26 IST · Critical severity

    An AI agent carried out the technical execution of a real-world ransomware attack for the first known time, but new details show a human still chose the victim, set up the infrastructure, and supplied stolen credentials — meaning it...

23. AI agent exploits Langflow in first fully autonomous ransomware attack

    SiliconANGLE · 07 Jul 2026, 04:28 IST · Critical severity

    Cloud security company Sysdig Inc. has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial intelligence agent, a campaign it calls JadePuffer. Sysdig’s Threat Research...

24. An AI agent just ran a full ransomware attack with no human at the keyboard

    TNW · 07 Jul 2026, 00:29 IST · Critical severity

    Security firm Sysdig says it has documented the first ransomware attack run end to end by an AI agent, first reported by Business Insider. A large language model planned, executed, and adapted the entire operation, which Sysdig has...

25. JadePuffer: The First Complete LLM-Driven Ransomware Attack

    darkreading · 06 Jul 2026, 22:06 IST · Critical severity

    An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt other systems.

26. Canadian spy agency says it hacked drug traffickers, extremists and a ransomware gang last year

    TechCrunch · 06 Jul 2026, 20:13 IST · High severity

    The hacking operations disclosed in a Canadian spy agency's annual report underscores some pressing national security threats facing the country and its top allies.

27. ⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More

    The Hacker News · 06 Jul 2026, 18:31 IST · High severity

    A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a browser permission prompt. That is the irritating part this week: the risky pieces were ordinary.

28. Researchers Claim First Fully Agentic Ransomware: JadePuffer

    Infosecurity Magazine · 06 Jul 2026, 14:00 IST · High severity

    Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can automate cyber-attacks

29. AI agent reportedly carried out an entire ransomware attack on its own

    Digital Trends · 06 Jul 2026, 06:14 IST · Critical severity

    Security researchers say an autonomous AI agent carried out a complete ransomware attack, adapting to failures and executing the intrusion with minimal human intervention.

30. Windows 11 Identifier Code Used to Arrest 19-Year-Old Over Alleged Ransomware Spree

    Slashdot · 05 Jul 2026, 23:24 IST · High severity

    America's Justice Department and FBI teamed joined Finland's National Bureau of Investigation to arrest a teenager they say is part of one of the world's biggest cybercrime syndicates, reports Tom's Hardware. The "Scattered Spider"...

31. JadePuffer ransomware used AI agent to automate entire attack

    BleepingComputer · 04 Jul 2026, 19:46 IST · High severity

    Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by a large language model (LLM) agent.

32. New Avalon Malware Framework Packs CrownX Ransomware Capabilities

    The Hacker News · 04 Jul 2026, 00:25 IST · High severity

    Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon...

33. Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation

    Infosecurity Magazine · 03 Jul 2026, 18:30 IST · High severity

    The ransomware landscape is reconsolidating around major players, with Qilin emerging as the leading RaaS operation, researchers say

34. Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP

    Infosecurity Magazine · 03 Jul 2026, 17:00 IST · Critical severity

    Researchers warn that collaboration could lead to “unprecedented” ransomware attacks, as FBI also issues warning

35. Researchers say an AI agent just ran a ransomware attack from start to finish, with no human at the keyboard

    TNW · 03 Jul 2026, 16:20 IST · Critical severity

    Ransomware has always needed a skilled human somewhere in the loop. Security firm Sysdig says that just changed. It has documented what it calls the first ransomware attack run from start to finish by an AI agent, with no human at the...

36. Agentic AI Used to Conduct Ransomware Attack via Langflow

    SecurityWeek · 03 Jul 2026, 16:30 IST · Critical severity

    Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions. The post Agentic AI Used to Conduct Ransomware Attack via Langflow appeared first on...

37. Cyber experts issue alert after two ransomware groups team up on ‘unprecedented’ threat campaign

    IT Pro · 03 Jul 2026, 15:54 IST · High severity

    Cyber experts issue alert after two ransomware groups team up on ‘unprecedented’ threat campaign

38. AI Agent Executes 'First' End-To-End Ransomware Attack

    Slashdot · 03 Jul 2026, 01:30 IST · Critical severity

    Sysdig says it has documented the first ransomware attack carried out end to end by an AI agent, which autonomously exploited exposed systems, stole credentials, established persistence, compromised a production database, and destroyed...

39. FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs

    darkreading · 03 Jul 2026, 00:41 IST · Critical severity

    After gaining a foothold in thousands of Fortinet firewalls, the attackers are starting to monetize that access, and are also piling on a Nextcloud zero-day bug.

40. Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

    The Hacker News · 03 Jul 2026, 00:00 IST · High severity

    Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. "Although tactics differ between affiliates, common patterns emerged...