Ransomware   2026()  2025()  2024()  2023(2) 2020()  2019()  2018()  OTHER() |    

Ransomware  Jak útočí  Klany  Techniky  Obrana  Popisky  Anti-Ramson Tool  Rescue plan  Anti-ransomware vaccine  Prevence  Video  Vývoj

DATE

NAME

INFO

CATEGORY

SUBCATE

24.10.26

 Krybit Ransomware Krybit is the name of a ransomware-as-a-service (RaaS) operation that first surfaced in early 2026. The group rents out the ransomware it has developed to affiliates who carry out attacks on its behalf, splitting ransoms extorted from victims 80:20 (80% to affiliates, 20% to the Krybit operators) in exchange for access to the malware, a dashboard, and round-the-clock technical support. RANSOM RANSOM

21.10.26

 #StopRansomware: SafePay Ransomware Once inside the network, SafePay actors establish control by creating new accounts or taking over existing ones. They then use legitimate system tools to move through the network, identify valuable files, and disable security protections to avoid detection. RANSOM RANSOM

17.10.26

 Qilin Ransomware Qilin ransomware combines file encryption with an affiliate operation that manages victims, ransom negotiations, and stolen-data publication. Different intrusion teams deploy its payloads, so identifying Qilin does not automatically identify the attacker or the method used to enter a network. RANSOM RANSOM

10.10.26

 Dire Wolf Ransomware Dire Wolf Ransomware is a double-extortion ransomware first observed in April 2025. By August 2026, it had claimed 100 victims across 32 countries, including the United States and Brazil, mainly in professional services, manufacturing, healthcare, technology, and financial services. RANSOM RANSOM

7.10.26

 IronChain During Cybersecurity Awareness Month, ransomware remains one of the clearest examples of how a cyber incident can become a business continuity issue. IronChain shows why. It puts business-critical data at risk of permanent loss and can bring operations to a halt. RANSOM RANSOM

4.10.26

 Warlock Warlock Ransomware Attackers Hit Water and Telecom Operators RANSOM RANSOM

19.9.26

 SETTRA RANSOMWARE NOTE: This is a Continuous Analysis Report of Settra Ransomware Group. The frequent updates of the group shall be found in this same article chronologically. RANSOM RANSOM

15.9.26

 Agentic Ransomware Ransomware has always needed a human involved somewhere: an affiliate navigating a network by hand, or at minimum, a person who wrote the script the malware executed. Agentic ransomware breaks that assumption. RANSOM RANSOM

11.9.26

 Mantax Otax Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration RANSOM RANSOM

19.8.26

 #StopRansomware: Medusa Ransomware Medusa is a ransomware-as-a-service (RaaS) variant first identified in June 2021. As of April 2026, Medusa developers and affiliates—referred to as “Medusa actors” in this advisory—have impacted over 500 victims from a variety of critical infrastructure sectors. Affected industries include medical, education, legal, insurance, technology, and manufacturing. Per FBI, the Medusa ransomware variant is unrelated to the MedusaLocker variant and the Medusa mobile malware variant. RANSOM RANSOM

19.8.26

 MAJINAHANASHI RANSOMWARE This is the initial intelligence gathering and analysis based on the newly found IOCs of Ransomware and also uncovered new File Servers and Communication Channel of the Group. RANSOM RANSOM

19.8.26

 CRPX0 Ransomware CRPX0 Ransomware Group, releasing samples (which has not yet been public as of now) and uncovering a Scam Service which was running by the same group, before launching Ransomware Program. RANSOM RANSOM

19.8.26

 TENGU RANSOMWARE This is the initial report of Tengu Ransomware. New Information was last added on 16th March 2026. RANSOM RANSOM

11.8.26

 DeadLock ransomware DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure RANSOM RANSOM

30.7.26

 Toy Ghouls Toy Ghouls’ new toy: the GenieLocker ransomware RANSOM RANSOM

25.7.26

 The Gentlemen RaaS The Gentlemen RaaS: Origins, OPSEC & OSINT RANSOM RaaS

25.7.26

 DEVMAN Ransomware DEVMAN Ransomware: Analysis of New DragonForce Variant RANSOM RANSOM

21.7.26

 JADEPUFFER JADEPUFFER evolves: The agentic threat actor deploys ransomware built to destroy AI models RANSOM AI
9.7.26 Beast Ransomware The Nature of the Beast Ransomware RANSOM RANSOM
9.7.26 GodDamn Ransomware GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses RANSOM RANSOM
2.7.26 JADEPUFFER JADEPUFFER: Agentic ransomware for automated database extortion RANSOM RANSOM
29.6.26 Payouts King Ransomware Payouts King Ransomware Initial Access Broker Deploys New Edgecution Malware RANSOM RANSOM
21.6.26 Prinz Eugen ransomware Prinz Eugen ransomware: a deep dive into a new Go-based encryptor RANSOM RANSOM
28.4.26 VECT 2.0 Ransomware A new ransomware gang calling itself Vect is recruiting affiliates and preparing for further operations. Operating as a ransomware-as-a-service (RaaS), the group launched its affiliate program in late December 2025 and began active operations a week later. RANSOM RANSOM
22.4.26 Kyber Ransomware Kyber Ransomware Double Trouble: Windows and ESXi Attacks Explained RANSOM RANSOM
22.4.26 DFIR Report – The Gentlemen & SystemBC DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy RANSOM RANSOM
8.3.26 Anubis Anubis: A New Ransomware Threat RANSOM RANSOM
23.1.26 Osiris Ransomware Osiris Ransomware: New Addition to the Locky Family RANSOM RANSOM