Latest Week in Ransomware news

The Week in Ransomware - April 19th 2024 - Attacks Ramp Up

While ransomware attacks decreased after the LockBit and BlackCat disruptions, they have once again started to ramp up with other operations filling the void.
- Lawrence Abrams
- April 19, 2024
- 07:36 PM
- 0
The Week in Ransomware - April 5th 2024 - Virtual Machines under Attack

Ransomware attacks targeting VMware ESXi and other virtual machine platforms are wreaking havoc among the enterprise, causing widespread disruption and loss of services.
- Lawrence Abrams
- April 05, 2024
- 05:59 PM
- 0
The Week in Ransomware - March 8th 2024 - Waiting for the BlackCat rebrand

We saw another ransomware operation shut down this week after first getting breached by law enforcement and then targeting critical infrastructure, putting them further in the spotlight of the US government.
- Lawrence Abrams
- March 08, 2024
- 05:25 PM
- 1
The Week in Ransomware - March 1st 2024 - Healthcare under siege

Ransomware attacks on healthcare over the last few months have been relentless, with numerous ransomware operations targeting hospitals and medical services, causing disruption to patient care and access to prescription drugs in the USA.
- Lawrence Abrams
- March 01, 2024
- 03:32 PM
- 0
The Week in Ransomware - February 2nd 2024 - No honor among thieves

Attacks on hospitals continued this week, with ransomware operations disrupting patient care as they force organization to respond to cyberattacks.
- Lawrence Abrams
- February 02, 2024
- 06:33 PM
- 0
The Week in Ransomware - January 26th 2024 - Govts strike back

Governments struck back this week against members of ransomware operations, imposing sanctions on one threat actor and sentencing another to prison.
- Lawrence Abrams
- January 27, 2024
- 12:19 PM
- 0
The Week in Ransomware - January 12th 2024 - Targeting homeowners' data

Mortgage lenders and related companies are becoming popular targets of ransomware gangs, with four companies in this sector recently attacked.
- Lawrence Abrams
- January 12, 2024
- 05:06 PM
- 1
The Week in Ransomware - January 5th 2024 - Secret decryptors

With it being the first week of the New Year and some still away on vacation, it has been slow with ransomware news, attacks, and new information.
- Lawrence Abrams
- January 05, 2024
- 05:16 PM
- 0
The Week in Ransomware - December 29th 2023 - LockBit targets hospitals

It's been a quiet week, with even threat actors appearing to take some time off for the holidays. We did not see much research released on ransomware this week, with most of the news focusing on new attacks and LockBit affiliates increasingly targeting hospitals.
- Lawrence Abrams
- December 29, 2023
- 03:39 PM
- 0
The Week in Ransomware - December 22nd 2023 - BlackCat hacked

Earlier this month, the BlackCat/ALPHV ransomware operation suffered a five-day disruption to their Tor data leak and negotiation sites, rumored to be caused by a law enforcement action.
- Lawrence Abrams
- December 22, 2023
- 04:20 PM
- 0
The Week in Ransomware - December 15th 2023 - Ransomware Drama

The big news over the past two weeks is the continued drama plaguing BlackCat/ALPHV after their infrastructure suddenly stopped working for almost five days. Multiple sources told BleepingComputer that this outage was related to a law enforcement operation, but BlackCat claims the outages were caused by a hardware/hosting issue.
- Lawrence Abrams
- December 15, 2023
- 04:18 PM
- 0
The Week in Ransomware - December 1st 2023 - Police hits affiliates

An international law enforcement operation claims to have dismantled a ransomware affiliate operation in Ukraine, which was responsible for attacks on organizations in 71 countries.
- Lawrence Abrams
- December 01, 2023
- 05:11 PM
- 1
The Week in Ransomware - November 17th 2023 - Citrix in the Crosshairs

Ransomware gangs target exposed Citrix Netscaler devices using a publicly available exploit to breach large organizations, steal data, and encrypt files.
- Lawrence Abrams
- November 17, 2023
- 06:26 PM
- 0
The Week in Ransomware - November 3rd 2023 - Hive's Back

Over the past couple of months, ransomware attacks have been escalating as new operations launch, old ones return, and existing operations continue to target the enterprise.
- Lawrence Abrams
- November 03, 2023
- 05:08 PM
- 0
The Week in Ransomware - October 27th 2023 - Breaking Records

Ransomware attacks are increasing significantly, with reports indicating that last month was a record month for ransomware attacks in 2023.
- Lawrence Abrams
- October 27, 2023
- 02:33 PM
- 0
The Week in Ransomware - October 20th 2023 - Fighting Back

This was a bad week for ransomware, with the Trigona ransomware suffering a data breach and law enforcement disrupting the RagnarLocker ransomware operation.
- Lawrence Abrams
- October 21, 2023
- 11:05 AM
- 1
The Week in Ransomware - October 13th 2023 - Increasing Attacks

Ransomware gangs continue to pummel the enterprise, with attacks causing disruption in business operations and resulting in data breaches if a ransom is not paid.
- Lawrence Abrams
- October 13, 2023
- 06:26 PM
- 0
The Week in Ransomware - September 29th 2023 - Dark Angels

This week has been a busy ransomware week, with ransomware attacks having a massive impact on organizations and the fallout of the MOVEit breaches to be disclosed.
- Lawrence Abrams
- September 29, 2023
- 05:50 PM
- 1
The Week in Ransomware - September 15th 2023 - Russian Roulette

This week's big news is the extortion attacks on the Caesars and MGM Las Vegas casino chains, with one having already paid the ransom and the other still facing operational disruptions.
- Lawrence Abrams
- September 15, 2023
- 05:54 PM
- 0
The Week in Ransomware - September 8th 2023 - Conti Indictments

It started as a slow ransomware news week but slowly picked up pace with the Department of Justice announcing indictments on TrickBot and Conti operations members.
- Lawrence Abrams
- September 08, 2023
- 05:45 PM
- 0