Tag

#ransomware

227 posts8 followers

Explore Hashnode

Alternatives

Cyber Knight4h ago · 4 min read

The Firm That Audits Everyone's Risk Just Landed on a Ransomware Leak Site

Nobody expects the auditors to get audited. On October 22, a new name appeared on the Everest ransomware group's leak site — and it made incident-response people across the world pause mid-scroll: PwC

nulltrace.hashnode.dev

Kazem Mortazavi4d ago · 2 min read

Why Backups Alone No Longer Stop Ransomware

Ransomware is no longer just about locked files. Modern ransomware groups usually steal data first and encrypt it second, then threaten to publish what they took. That changes the math: a complete bac

securityland.hashnode.dev

404 FoundersOct 16 · 4 min read

The Weekend the Grocery Sector Broke

Sunday night in France, supermarket managers got a refrigerator alarm - the kind nobody drills for. The freezers were heating up. By 6 a.m. on October 12, freezers in hundreds of stores had climbed to

404-founders.com

Vikram Kumar ShuklaOct 16 · 4 min read

A brand-new ransomware group just put 38 shipping companies on one hit list. Monday is the deadline.

On 12 October, a ransomware operation most people had never heard of did something unusual: it named 38 companies at once. Not one victim, dripped out over weeks. Thirty-eight, in a single post. The g

vikramkumarshukla.hashnode.dev

404 FoundersOct 15 · 10 min read

An Affiliate Ran Ransomware Through an AI Coding Assistant. Here Is How.

Azazel's double life as a Gentlemen ransomware affiliate exposed a CI/CD secrets problem, a Kubernetes harvest chain, and - an alleged use of MCP as a command-and-control channel, as described in Clou

404-founders.com

404 FoundersOct 11 · 6 min read

The Second Ransom: Inside the MonsterCloud Recovery Fraud

When Fabian Wosar wanted to find out whether ransomware recovery firms were secretly paying hackers, he didn't file a FOIA request. He wrote malware. In December 2016, Wosar and a colleague created th

404-founders.com

Zero Trust ThreadsOct 9 · 8 min read

A Backup Is Not a Recovery Plan

Someone asks: "Do we have backups?" The answer is yes. Everyone feels better. That is understandable. Backups matter. But there is another question that matters just as much: Can you actually recov

zerotrustthreads.hashnode.dev

Vikram Kumar ShuklaOct 9 · 4 min read

The extortion crew just got extorted. Someone leaked the Silent Ransom Group's own playbook.

I read about this one twice, because it felt backwards the first time: the gang that specialises in stealing law firms' files and demanding millions not to publish them has had its own files published

vikramkumarshukla.hashnode.dev

Vikram Kumar ShuklaOct 5 · 5 min read

An insurer's name sat on a ransomware leak site for six weeks. Nobody knew what it meant.

On August 22, 2026, a data-extortion crew calling itself Coinbase Cartel added Tower Insurance to its leak site. Tower Limited is a New Zealand insurer, listed on both the NZX and the ASX, with 323,00

vikramkumarshukla.hashnode.dev

404 FoundersOct 4 · 4 min read

Warlock Targets Water and Telecom Operators with SharePoint, VS Code Tunnels, and SYSVOL

Symantec’s Threat Hunter Team reported on October 1, 2026 that the China-nexus group it tracks as Longlegs—also known as Microsoft Storm-2603—had attacked at least four organizations during the preced

404-founders.com

Search Hashnode

Explore Hashnode

Trending tags this week

The Firm That Audits Everyone's Risk Just Landed on a Ransomware Leak Site

Why Backups Alone No Longer Stop Ransomware

The Weekend the Grocery Sector Broke

A brand-new ransomware group just put 38 shipping companies on one hit list. Monday is the deadline.

An Affiliate Ran Ransomware Through an AI Coding Assistant. Here Is How.

The Second Ransom: Inside the MonsterCloud Recovery Fraud

A Backup Is Not a Recovery Plan

The extortion crew just got extorted. Someone leaked the Silent Ransom Group's own playbook.

An insurer's name sat on a ransomware leak site for six weeks. Nobody knew what it meant.

Warlock Targets Water and Telecom Operators with SharePoint, VS Code Tunnels, and SYSVOL