Targeted social engineering is en vogue as ransom payment sizes increase
Several ransomware groups used highly targeted social engineering tactics to create a major impact across several industry sectors in Q2 2025.
Search Intelligence
Browser extensions turn nearly 1 million browsers into website-scraping bots
Extensions load unknown sites into invisible Windows. What could go wrong?
Unless users take action, Android will let Gemini access third-party apps
Important changes to Android devices took effect starting Monday.
Ransomware victims are getting better at haggling with hackers
Nearly half of companies paid a ransom to get their data back last year, according to new research, but they’re taking a hard line with hackers to strike fair deals. In its latest State of Ransomware
Nintendo warns Switch 2 GameChat users: “Your chat is recorded”
Temporary local copies can be shared with Nintendo through manual user reporting.
It’s been a bad week for ransomware operators
Hundreds of servers have been taken down as part of an international law enforcement operation against ransomware groups. Coordinated by Europol and Eurojust, the action saw key infrastructure dismant
The organizational structure of ransomware threat actor groups is evolving before our eyes
The Ransomware-as-a-service (RaaS) model has not recovered from law enforcement disruption, and the entrance of novice actors along with non-Russian state-linked cybercriminals has led to uncertain ou
Will Law Enforcement success against ransomware continue in 2025?
2024 was a banner year for Law enforcement agency actions against ransomware and cybercrime groups. Will the new administration ensure this momentum continues?
Misleading Metrics: Unraveling Ransom Payment Statistics in Australia
A recent Australian Financial Review (AFR) article contained statistics about ransomware payment trends that require some deeper inspection.
Law enforcement doxxing raises risk profile for threat actors
In Q3 2024 Law enforcement actions disrupted infrastructure and publicized the identity of several prolific ransomware threat actors
Ransomware actors pivot away from major brands in Q2 2024
Unaffiliated ‘lone wolf’ threat actors carry out a greater share of attacks as they attempt to obfuscate their identity in Q2 2024.
RaaS devs hurt their credibility by cheating affiliates in Q1 2024
RaaS developers were caught cheating their affiliates, shaking the trust in the RaaS model following several high profile law enforcement actions.
New Ransomware Reporting Requirements Kick in as Victims Increasingly Avoid Paying
A lower percentage of ransomware victims are paying, as new regulations begin to elicit more and more public disclosure of ransomware incidents.
Scattered Ransomware Attribution Blurs Focus on IR Fundamentals
In Q3 2023 a series of ransomware attacks by similar threat actors created headlines and blurred the lines of attribution.
Beyond Hamas: Militant and Terrorist Groups Involved in the October 7 Attack on Israel
Explore the military and terrorist groups collaborating with Hamas in the Israel-Hamas War, based on reports and open-source intelligence The post Beyond Hamas: Militant and Terrorist Groups Involved