Research reports
1,224 reports from 387 publishers45 added in the past week
128 reports, newest added first
Added Sun 5 Apr
Nine Entertainment warns ransomware recovery 'will take time'
Nine Entertainment warned Monday night that it would be some time before it could fully restore core systems and connectivity following a ransomware infection over the weekend. Chief information and technology officer Damian Cronan said in a letter to staff…
Ransomware
Added Thu 2 Apr
Powerhost’s ESXi Servers Encrypted with New SEXi Ransomware
IxMetro Powerhost, a Chilean data center and hosting provider, has become the latest target of a cyberattack by a newly identified ransomware group dubbed SEXi. This malicious group successfully encrypted the company’s VMware ESXi servers, which host virtual…
Ransomware
Added Thu 26 Feb
CERTFR-2019-CTI-009.pdf
Ces dernières semaines, l’ANSSI a observé plusieurs attaques impliquant le déploiement du rançongiciel Clop sur des systèmes d’information en France. Ce code malveillant chiffre les documents présents sur les SI et leur ajoute, suivant les versions,…
Ransomware
Added Tue 20 Jan
Yalishanda.pdf
The interesting thing about cybercrime is that, sooner or later, the names behind those who commit it are going to come out. Often, unraveling starts from the inside, with actors turning on each other, or someone close enough to do real harm. In February…
Ransomware
Added Tue 16 Dec 2025
RALord-Novo-grupo-de-Ransomware-as-a-Service-1.pdf
WhatsApp! Heimdall Security Research Acesse boletins diários sobre agentes de ameaças, malwares, indicadores de comprometimentos, TTPs e outras informações no site da ISH. Boletins de Segurança – Heimdall P á g i n a 3 | 35 SUMÁRIO 1 Sumário executivo…
Ransomware
Added Wed 29 Oct 2025
202406181500_Qilin Threat Profile_TLPCLEAR
Qilin is a ransomware-as-a-service (RaaS) offering in operation since 2022, and which continues to target healthcare organizations and other industries worldwide. The group likely originates from Russia, and was recently observed recruiting affiliates in late…
Ransomware
A Deep Dive into Medusa Ransomware
Medusa ransomware appeared in June 2021, and it became more active this year by launching the “Medusa Blog” containing data leaked from victims that didn’t pay the ransom. The malware stops a list of services and processes decrypted at runtime and deletes the…
RansomwareMalware
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.