Ransomware

Mastering Ransomware Defense: Your Resource for Prevention, Response, Recovery, and More.

Malware campaign uses VirusTotal manipulation, legitimate news sites to gain reputation

Laura FrenchJune 18, 2026

The clipboard hijacker campaign also uses “ghost networks” on social media to boost engagement.

Today's Top Ransomware Headlines

Ransomware News

Ransomware

LLMS, Identity, EDR, JiGong, QiLin, Warlock, with Rob Allen from Threatlocker… – Rob Allen – SWN #591

June 19, 2026

Doug and Rob Allen talk about Identity, EDR, Your Great Aunt Ida Meets some hot firefighters, and more. Segment Resources: Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools: https://thehackernews.com/2026/04/qilin-and-warlock-ransomware-use.html. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com...

Ransomware

Attackers drop DragonForce ransomware leveraging MS Teams relay systems

Steve ZurierJune 17, 2026

DragonForce ransomware abused Microsoft Teams relay infrastructure to hide C2 traffic.

Phishing

Suspected North Korean actors use fake ‘coding assignments’ to steal crypto

Laura FrenchJune 9, 2026

Targets are encouraged to clone Git repositories to their VS Code or Cursor code editors.

Malware

Malicious podcast, PDF apps spread FlutterShell macOS backdoor malware

Laura FrenchJune 5, 2026

FlutterShell is linked to previous malvertising campaigns including TamperedChef.

Vulnerability Management

Heraclitus, AI LLMs, SSO, TTP, NetLogon, PAN-OS, AI Cost, Aaran Leyland… – SWN #586

June 2, 2026

Heraclitus Unbound, AI LLMs, SSO, TTP, NetLogon, PAN-OS, AI Cost, Aaran Leyland, and More on the Security Weekly News.

(Credit: daily_creativity – stock.adobe.com)

Ransomware

‘Claude Code install’ search result leads to ClickFix infostealer attack

Laura FrenchMay 29, 2026

The attack leverages a polyglot file, heavy obfuscation and fileless execution to evade detection.

Ransomware

WantToCry ransomware evades detection through SMB abuse, remote encryption

Laura FrenchMay 20, 2026

More than 1.5 million exposed SMB ports may be susceptible to brute force attacks.

Application security

Why Basic Security Practices Still Work – Rob Allen – ASW #382

May 12, 2026

If you have to ditch your entire appsec strategy because you expect 2026 to bring more vulns more quickly, then you probably didn't have a good strategy in the first place. Rob Allen shares how the mentality of "assume breach" doesn't have to be a defeatist attitude and can instead be a way to change a catastrophic breach into a more contained one....

Ransomware

Iranian threat group used Chaos ransomware as a ‘false flag,’ researchers say

Laura FrenchMay 7, 2026

The purported ransomware attack did not encrypt files and used infrastructure tied to MuddyWater.

Identity

CloudZ RAT plugin targets Windows Phone Link for possible OTP theft

Laura FrenchMay 6, 2026

The Pheno plugin monitors active Phone Link connections to eavesdrop on texts and notifications.

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Ransomware

Malware campaign uses VirusTotal manipulation, legitimate news sites to gain reputation

Today's Top Ransomware Headlines

New Prinz Eugen ransomware targets recent files, avoids ransom notes

FBI warns of sophisticated Kali365 phishing service targeting Microsoft accounts

Summer vacation scams surge, targeting travel industry

SprySOCKS backdoor expands to Windows with new variants

Ransomware: Explained and Explored

Veeam’s Shiva Pillay: Ensuring data trust and contextualization for AI security

Lessons from Identiverse 2026

Identity is the foundation of trust. That makes it everyone’s problem.

Identiverse 2026: Everyone wants an AI assistant. Few are ready to govern one

As AI enters the SOC, evidence becomes more important than ever

Supplier risk has become a business resilience problem

Identiverse 2026: Blended Identities and the challenge of IAM for AI

Identiverse 2026: Who is responsible for an AI agent’s actions?

Identiverse 2026: Agentic AI has an identity problem

Turn underground intelligence into actionable security

Ransomware News

LLMS, Identity, EDR, JiGong, QiLin, Warlock, with Rob Allen from Threatlocker… – Rob Allen – SWN #591

Attackers drop DragonForce ransomware leveraging MS Teams relay systems

Suspected North Korean actors use fake ‘coding assignments’ to steal crypto

Malicious podcast, PDF apps spread FlutterShell macOS backdoor malware

Heraclitus, AI LLMs, SSO, TTP, NetLogon, PAN-OS, AI Cost, Aaran Leyland… – SWN #586

‘Claude Code install’ search result leads to ClickFix infostealer attack

WantToCry ransomware evades detection through SMB abuse, remote encryption

Why Basic Security Practices Still Work – Rob Allen – ASW #382

Iranian threat group used Chaos ransomware as a ‘false flag,’ researchers say

CloudZ RAT plugin targets Windows Phone Link for possible OTP theft

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Ransomware Events

Ransomware reloaded: Finding resilience when attackers wield AI

Ransomware Resilience: Strategies to Defend, Mitigate, and Recover