Cyber Attacks by Ransomware Groups Target Major Organizations

First seen 2 Dec 2025, 18:33 UTC • Research.Checkpoint

•8

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

In November 2025, the Everest ransomware group attacked AT&T, Dublin Airport, and Air Arabia, exfiltrating sensitive data including 576,000 AT&T applicant records. Additionally, a cyber attack on the US Congressional Budget Office (CBO) was confirmed, involving a suspected foreign threat actor breaching its network and potentially exposing sensitive communications.

How this analysis works

Attack Flow

13 entities, 23 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Ransomware
Trojan

Organization (4)

Air Arabia
AT&T
Dublin Airport
US Congressional Budget Office (CBO)

Vulnerability (3)

CVE-2025-58034
FortiWeb
Fortinet FortiWeb Command Injection

Malware (1)

Mirai

Threat Actor (2)

Akira
Everest

Relationships

Akira uses Mirai
Everest uses Mirai
Akira uses Data Breach
Akira uses Ransomware
Akira uses Trojan
Everest uses Data Breach
Everest uses Ransomware
Everest uses Trojan
Mirai exploits CVE-2025-58034
Mirai exploits FortiWeb
Mirai exploits Fortinet FortiWeb Command Injection
Akira targets Air Arabia
Akira targets AT&T
Akira targets Dublin Airport
Akira targets US Congressional Budget Office (CBO)
Everest targets Air Arabia
Everest targets AT&T
Everest targets Dublin Airport
Everest targets US Congressional Budget Office (CBO)
Mirai targets Air Arabia
Mirai targets AT&T
Mirai targets Dublin Airport
Mirai targets US Congressional Budget Office (CBO)

Continue Reading

Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation Akira Ransomware Group Targets Critical Infrastructure, Extracts $42 Million Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies Exploitation of Remote Services in Cyber Attacks CVE-2024-40766 Exploited by Ransomware Groups Targeting SonicWall Firewalls Ransomware Group Targets SonicWall Gen 7 Firewalls via CVE-2024-40766

Cyber Attacks by Ransomware Groups Target Major Organizations

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading