ransomware

lockbit ransomware

lockbit, ransomware

Apache ActiveMQ Exploit Leads to LockBit Ransomware

February 23, 2026

ransomware rdp

ransomware, rdp

Cat’s Got Your Files: Lynx Ransomware

December 17, 2025

akira Flash Alert ransomware

akira, Flash Alert, ransomware

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

November 4, 2025

dragonforce play ransomhub

dragonforce, play, ransomhub, sectoprat

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

September 8, 2025

ransomhub ransomware rdp

ransomhub, ransomware, rdp

Hide Your RDP: Password Spray Leads to RansomHub Deployment

June 30, 2025

elpacoteam mimic ransomware

elpacoteam, mimic, ransomware

Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware

May 19, 2025

ransomware sliver

ransomware, sliver

Navigating Through The Fog

April 28, 2025

blacksuit bruteratel cobaltstrike

blacksuit, bruteratel, cobaltstrike, ransomware, sectoprat

Fake Zoom Ends in BlackSuit Ransomware

March 31, 2025

lockbit exploit ransomware

lockbit, exploit, ransomware

Confluence Exploit Leads to LockBit Ransomware

February 24, 2025

lockbit cobaltstrike ransomware

lockbit, cobaltstrike, ransomware

Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware

January 27, 2025

Access DFIR Labs Book a Demo

The DFIR Report provides in-depth, real-world intelligence based on observed intrusions, enabling security analysts and teams  to strengthen defenses, enhance detection,  and accelerate response.