Ransomware
Curated coverage and analysis in this editorial area.
Orova Strikes Hong Kong on Day of SFC's First Ransomware Fine
The Orova ransomware group listed five Hong Kong victims on August 4, 2026, bringing its confirmed tally to 24 in three months. The ne…
CRPx0 Lists Hyundai Turkey: The Credibility Gap in Dark Web Claims
Ransomware group CRPx0 has listed Hyundai Turkey on its dark web leak site. With no official confirmation and no independent verificat…
Data-Theft Campaign Targets Windchill and FlexPLM via CVE-2026-12569 RCE
A data-theft extortion campaign is exploiting CVE-2026-12569, a critical unauthenticated RCE in PTC Windchill and FlexPLM, to deploy h…
AnMed Ransomware: 72-Hour Criminal Deadline Collides With 72-Hour CIRCIA Mandate
AnMed Health suffered a ransomware attack starting July 26, 2026, with a patient reporting a 72-hour ransom demand. The health system…
Ransomware in Vietnam: A 2.56% Drop Masks a More Insidious Threat
Kaspersky's Q1 2026 report shows fewer Vietnamese SMEs hit by ransomware, but experts warn the threat has shifted to earlier intrusion…
Prinz Eugen: The Ransomware That Encrypts Recent Files and Vanishes Without a Trace
Prinz Eugen sorts files by modification date, verifies decryptability, then wipes its key and binary. A model targeting the data least…
Spirals: New Rust Ransomware Deployed Across Enterprise Network in Under 24 Hours
The Symantec Threat Hunter Team has documented Spirals, a Rust-based ransomware using ECDH+AES hybrid encryption. An attack in South A…
Anubis Hits Fairlife-Coca-Cola: Production Halted, 1 TB of Data Threatened
The Anubis ransomware group claims responsibility for an attack on Fairlife, a Coca-Cola subsidiary specializing in premium dairy prod…
Qilin Exploits CVE-2026-0257: From VPN Bypass to Ransomware in 4 Days
Arctic Wolf confirms Qilin ransomware is exploiting CVE-2026-0257 in Palo Alto GlobalProtect. The window between patch availability an…
Stadler Rejects $12.3M Ransom: Everest Fails to Leak Data
Swiss rail manufacturer Stadler Rail publicly refused a 10 million Swiss franc ($12.3 million) ransom demand from the Everest ransomwa…
EncForge: JadePuffer Hits Irrecoverable AI Models With Agentic Ransomware
The agentic threat actor JadePuffer has deployed EncForge, ransomware purpose-built for AI/ML assets. Encrypted models cannot be recov…
RansomHouse Hits Nichirei: 140 Cold-Storage Hubs Frozen, KFC Japan Runs Out of Chicken
RansomHouse claimed responsibility for a cyberattack on Nichirei, Japan's frozen-food logistics giant. The company's defensive network…