Frequency
2
occurrences
First Seen
April 17, 2026
Last Seen
July 14, 2026
Related Threat Clusters
-
EU Sanctions Vitaly Kovalev, Ransomware Leader of Trickbot Group
On July 14, 2026, the European Union, in coordination with the U.S. and U.K., sanctioned Vitaly Nikolayevich Kovalev, known as 'Stern,' a key figure in the Trickbot ransomware syndicate. Kovalev is linked to over $300…
4 articles · Updated July 15, 2026 -
Hackers Exploit QEMU VMs to Evade Detection and Deploy Ransomware
Hackers are utilizing QEMU, an open-source virtual machine emulator, to create hidden Linux environments within Windows systems, effectively evading endpoint security tools. This method allows for long-term access,…
8 articles · Updated April 17, 2026
Recent Intelligence Reports
- “Stern” Ransomware Operator Sanctioned by EU — Chainalysis · July 14, 2026
- Payouts King ransomware uses QEMU VMs to bypass endpoint security — Bleepingcomputer · April 17, 2026