#cl0p-ransomware
#cl0p-ransomware
[ follow ]
#cybersecurity #malware #ransomware #cybercrime #iran #data-breach #north-korea #supply-chain-attack #axios #hacking
fromSecurityWeek
4 days agoTelnyx Targeted in Growing TeamPCP Supply Chain Attack
The WAV file is a valid audio file. It passes MIME-type checks. But the audio frame data contains a base64-encoded payload. Decode the frames, take the first 8 bytes as the XOR key, XOR the rest, and you have your executable or Python script.
Python
fromComputerworld
13 hours agoA core infrastructure engineer pleads guilty to federal charges in insider attack
Rhyne's attack involved unauthorized remote desktop sessions, deletion of network administrator accounts, and changing of passwords, showcasing significant security vulnerabilities.
Information security
#malware
Information security
fromThe Hacker News
1 day agoResearchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners
Operation REF1695 uses fake installers to deploy RATs and cryptocurrency miners, monetizing infections through CPA fraud since November 2023.
#ransomware-attack
Privacy professionals
fromTechCrunch
2 weeks agoMarquis says over 672,000 people had personal and financial data stolen in ransomware attack | TechCrunch
Marquis, a fintech company serving hundreds of banks, suffered a ransomware attack in August 2025 that compromised personal and financial data of over 672,000 people, with more than half residing in Texas.
Information security
fromTheregister
3 weeks agoCrims hit EV charger firm ELECQ, steal customer contact data
ELECQ, a smart EV charger maker, suffered a ransomware attack on March 7 that encrypted and copied customer personal data including names, email addresses, phone numbers, and home addresses from its AWS cloud systems.
Information security
fromComputerWeekly.com
3 weeks agoInterpol obliterates cyber criminal infrastructure | Computer Weekly
Interpol's Operation Synergia III neutralized 45,000 malicious IP addresses and servers across 72 countries, resulting in 94 arrests and over 100 investigations targeting cyber fraud, phishing, malware, and ransomware infrastructure.
Information security
fromTheregister
3 weeks agoInterpol sinkholes 45,000 IPs linked to global cybercrime
Interpol arrested 94 cybercriminals across multiple countries during Operation Synergia III, seizing 212 devices and sinkholing over 45,000 malicious IP addresses linked to phishing, romance scams, and credit card fraud.
Information security
fromThe Hacker News
3 weeks agoHive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks
AI-generated malware Slopoly enables threat actors to develop malware frameworks significantly faster, demonstrating the weaponization of AI for cybercriminal purposes.
fromTechzine Global
4 weeks ago2025 was a new record year for ransomware
Qilin was the most active ransomware group in 2025 with 1,022 attacks, accounting for 13 percent of the total. The group operates via a franchise-like Ransomware-as-a-Service model: affiliates arrange initial access, while the core operators manage negotiations and publications of the leaked data.
Information security
fromComputerWeekly.com
1 month agoQilin crew continues to dominate ransomware ecosystem | Computer Weekly
Given the scale and disruption of 2025, this pattern could be an early signal that 2026 may follow a similar path. Organisations should not mistake the month-on-month drop for a decline in risk. As for Qilin, its attacks show no signs of stopping - within the past few days it has claimed a breach of the Local 100 Chapter of the Transport Workers Union of America, affecting 41,000 current and 26,000 former employees.
Information security
fromSecurityWeek
1 month agoMan Linked to Phobos Ransomware Arrested in Poland
A 47-year-old man arrested by police in Poland for allegedly being involved in cybercriminal activities has been linked to the Phobos ransomware operation. According to Poland's Central Cybercrime Bureau, officers found hacking tools, credentials, payment card numbers, and server IP addresses on the unnamed suspect's devices during a search. They also discovered that the suspect had exchanged messages with the Phobos ransomware group.
Information security
fromThe Hacker News
1 month agoInfostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens
Cybersecurity researchers disclosed they have detected a case of an information stealer infection successfully exfiltrating a victim's OpenClaw (formerly Clawdbot and Moltbot) configuration environment. "This finding marks a significant milestone in the evolution of infostealer behavior: the transition from stealing browser credentials to harvesting the 'souls' and identities of personal AI [artificial intelligence] agents," Hudson Rock said. Alon Gal, CTO of Hudson Rock, told The Hacker News that the stealer was likely a variant of Vidar based on the infection details.
Information security
fromComputerworld
1 month agoGlobal Group ransomware gang running new campaign using Windows shortcut files
When Microsoft patched a vulnerability last summer that allowed threat actors to use Windows' shortcut (.lnk) files in exploits, defenders might have hoped use of this tactic would decline. They were wrong. According to researchers at Forcepoint, a new high-volume phishing campaign spreading the Global Group ransomware has been detected that hopes to sucker employees into clicking on an attachment in an email with the subject line 'Your document.'
Information security
[ Load more ]