Black Basta

New Mistic Backdoor Linked to Ransomware Access Broker Activity

The Gentlemen Ransomware Group Exploits Fortinet Flaws and AI Tools

Latvian Ransomware Negotiator Sentenced for $56 Million Cyber Extortion Scheme

Hackers Exploit QEMU VMs to Evade Detection and Deploy Ransomware

Ukrainian National Pleads Guilty in Conti Ransomware Case

GhostSocks Malware: A Growing Threat Utilizing Residential Proxies

Ransomware Fuels Surge in Global Cyberattacks

Gentlemen RaaS Leak Exposes 10% of 2026's Ransomware Victims

Akira Ransomware Uses Safe Mode to Evade EDR Detection

Black Basta Ransomware Leader Added to EU & Interpol Most Wanted Lists

Social Engineering Attack via Microsoft Teams Deploys A0Backdoor Malware

US Government Agency Paid $1M to Data Extortion Group Kairos

Black Basta Ransomware Integrates BYOVD Defense Evasion Technique

US, UK, and Australia Sanction Russian Cyber Firm Media Land for Ransomware Links

Ukrainian and German Authorities Raid Homes of Black Basta Hackers

UK Retail Cyber Attacks Show No Seasonal Spike Amid Holiday Concerns

Raids Target Black Basta Ransomware Group in Ukraine

Ukrainian National Extradited for Conti Ransomware Charges Facing 25 Years in Prison

Oleg Nefekov Added to EU Most-Wanted List for Ransomware Activities

Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads for Malware Distribution

Ukrainian Extradited to US for Role in Conti Ransomware Operation

Rhysida Ransomware Gang Uses Fake Microsoft Teams Ads to Infect Users

Black Friday 2025 Sees Surge in Online Shopping Scams

Ukraine-Germany Operation Targets Black Basta Ransomware Group

Stealthy Mistic Backdoor Targets Enterprise Networks via KongTuke Ransomware Access Broker

Be on the lookout for Mistic, a new backdoor used by ransomware broker

Symantec’s Threat Hunter Team observed ModeloRAT

Stealthy Mistic backdoor linked to ransomware access broker KongTuke

Backdoor.Mistic: New Backdoor May be Linked to Ransomware Access Broker

ModeloRAT and Mistic Backdoor Activity Linked to Ransomware Initial Access Broker

Stealthy Mistic backdoor linked to ransomware access broker KongTuke

Backdoor.Mistic: New Backdoor May be Linked to Ransomware Access Broker

Ukrainian national pleads guilty to role in Conti ransomware operation

Ukrainian national pleads guilty to role in Conti ransomware operation

Gentlemen Ransomware Exploits Fortinet Flaws, AI, and Custom C2 Tools

Inside The Gentlemen Leak: How a New RaaS Captured 10% of 2026's Global Ransomware Victims

Latvian national sentenced for ransomware attacks run by former Conti leaders

IT security researchers from Huntress provide helpful hints

Quick Assist abuse

Black Basta-linked attacks target executives via Teams phishing | news

Threat Spotlight Are Former Black Basta Affiliates Automating Executive Targeting

Black Basta’s playbook lives on as former affiliates launch fast

Return of Black Basta – affiliates assemble for new campaign

Microsoft links Medusa ransomware affiliate to zero

Tracking & Detecting GhostSocks Malware

Tracking & Detecting GhostSocks Malware

Novel A0Backdoor spread in Teams phishing operation | brief

New Attack Campaign Exploits Microsoft Teams Impersonation to Install A0Backdoor

Black Basta Bundles BYOVD With Ransomware Payload

Black Basta Ransomware Integrates BYOVD Technique to Evade Defenses

Black Basta Ransomware Actors Embeds BYOVD Defense Evasion Component with Ransomware Payload Itself

Recent Black Basta Ransomware Campaign Embeds Vulnerable Driver in Payload

Black Basta ransomware boss placed on EU & Interpol Most Wanted lists

Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice

Black Basta boss makes it onto Interpol's 'Red Notice' list

Police raid homes of alleged Black Basta hackers, hunt suspected Russian ringleader

German cops add Black Basta boss to EU most-wanted list

Police Target Ukrainians and Russian in Ransomware Probe