Nirsoft is a tool tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed April 23, 2026; most recent activity July 9, 2026.
In March 2026, the Trigona ransomware group, which operates as a Ransomware-as-a-Service (RaaS), utilized a newly developed custom tool named 'uploader_client.exe' to enhance their data exfiltration capabilities. This…
The GodDamn ransomware, a rebrand of the Beast and Monster strains, has emerged as a significant threat, primarily targeting American organizations across various sectors. The threat group Hyadina utilized a malicious…