#ransomware — Public Fediverse posts

[QILIN] - Ransomware Victim: Complete Packaging Solutions - https://www.redpacketsecurity.com/qilin-ransomware-victim-complete-packaging-solutions/

#qilin #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[QILIN] - Ransomware Victim: Tanner - https://www.redpacketsecurity.com/qilin-ransomware-victim-tanner/

#qilin #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[SPACEBEARS] - Ransomware Victim: Schwartz, Giannini, Lantsberger & Adamson (SGLA) - https://www.redpacketsecurity.com/spacebears-ransomware-victim-schwartz-giannini-lantsberger-adamson-sgla/

#spacebears #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[PANZER] - Ransomware Victim: Hochschule Heilbronn Bildungscampus - https://www.redpacketsecurity.com/panzer-ransomware-victim-hochschule-heilbronn-bildungscampus/

#panzer #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[SPACEBEARS] - Ransomware Victim: Studio Oculistico Ciraci - https://www.redpacketsecurity.com/spacebears-ransomware-victim-studio-oculistico-ciraci/

#spacebears #dark_web #data_breach #OSINT #ransomware #threatintel #tor

NEW, by me:

Two “Nephrology Associates” suffered cyberattacks. Only one of them has disclosed it.

https://databreaches.net/2026/09/03/two-nephrology-associates-suffered-cyberattacks-only-one-of-them-has-disclosed-it/

#databreach #healthsec #HIPAA #HITECH #incident_response #ransomware #hackandleak

Backup/restore from and to #Proxmox works like a charm (ZorinOS18 machine).

#APM2 #Synology #ActiveProtectManager #backup #ransomware #selfhosting #selfhosted #homelab #disasterrecovery

Backup/restore from and to #Proxmox works like a charm (ZorinOS18 machine).

#APM2 #Synology #ActiveProtectManager #backup #ransomware #selfhosting #selfhosted #homelab #disasterrecovery

Backup/restore from and to #Proxmox works like a charm (ZorinOS18 machine).

#APM2 #Synology #ActiveProtectManager #backup #ransomware #selfhosting #selfhosted #homelab #disasterrecovery

Backup/restore from and to #Proxmox works like a charm (ZorinOS18 machine).

#APM2 #Synology #ActiveProtectManager #backup #ransomware #selfhosting #selfhosted #homelab #disasterrecovery

Backup/restore from and to #Proxmox works like a charm (ZorinOS18 machine).

#APM2 #Synology #ActiveProtectManager #backup #ransomware #selfhosting #selfhosted #homelab #disasterrecovery

It's upgrade time! #APM2
#Synology #ActiveProtectManager #backup #ransomware #selfhosting #selfhosted #homelab #disasterrecovery

🚨New ransom group blog posts!🚨

Group name: incransom
Post title: myglobal.com
Info: https://cti.fyi/groups/incransom.html

Group name: insomnia
Post title: Maglin, Miskiv & Associates
Info: https://cti.fyi/groups/insomnia.html

Group name: nightspire
Post title: Transportes Montejo S.A.S.
Info: https://cti.fyi/groups/nightspire.html

Group name: nightspire
Post title: Truckworx
Info: https://cti.fyi/groups/nightspire.html

Group name: nightspire
Post title: Easyoga
Info: https://cti.fyi/groups/nightspire.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

[SILENTRANSOMGROUP] - Ransomware Victim: Katten Muchin Rosenman - https://www.redpacketsecurity.com/silentransomgroup-ransomware-victim-katten-muchin-rosenman/

#silentransomgroup #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[SILENTRANSOMGROUP] - Ransomware Victim: A[.][.][.]en - https://www.redpacketsecurity.com/silentransomgroup-ransomware-victim-a-en/

#silentransomgroup #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[SILENTRANSOMGROUP] - Ransomware Victim: P[.][.][.] S[.][.][.] - https://www.redpacketsecurity.com/silentransomgroup-ransomware-victim-p-s/

#silentransomgroup #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[INCRANSOM] - Ransomware Victim: myglobal[.]com - https://www.redpacketsecurity.com/incransom-ransomware-victim-myglobal-com/

#incransom #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[INCRANSOM] - Ransomware Victim: myglobal[.]com - https://www.redpacketsecurity.com/incransom-ransomware-victim-myglobal-com/

#incransom #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[INCRANSOM] - Ransomware Victim: myglobal[.]com - https://www.redpacketsecurity.com/incransom-ransomware-victim-myglobal-com/

#incransom #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[INCRANSOM] - Ransomware Victim: myglobal[.]com - https://www.redpacketsecurity.com/incransom-ransomware-victim-myglobal-com/

#incransom #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[INCRANSOM] - Ransomware Victim: myglobal[.]com - https://www.redpacketsecurity.com/incransom-ransomware-victim-myglobal-com/

#incransom #dark_web #data_breach #OSINT #ransomware #threatintel #tor

New post from #Inc Ransom : Myglobal.Com
More at : https://www.ransomlook.io/group/Inc%20Ransom #Ransomware

Node.js: Old Technique Makes a Comeback

A resurgence in Node.js abuse has been observed since February 2026, targeting government departments, technology companies, and hotels. Attackers leverage the legitimate, signed node.exe binary to execute malicious JavaScript payloads, evading signature-based detection. In one intrusion at an Asian technology company, attackers downloaded the official Node.js installer after repeated payload blocks and used it to run an implant communicating with Ethereum blockchain gateways via EtherHiding techniques. The same threat actors compromised a U.S. fintech firm, deploying the Rust-based C2Looper backdoor linked to ransomware operations. Multiple attacks involved ModeloRAT, associated with initial access broker Woodgnat, connected to ransomware families including Qilin, Interlock, Rhysida, Akira, 8Base, Black Basta, and Embargo. Attackers employ ClickFix techniques for initial access and combine living-off-the-land tools with commodity malware.

Pulse ID: 6a996ed3562f794a642feaaf
Pulse Link: https://otx.alienvault.com/pulse/6a996ed3562f794a642feaaf
Pulse Author: AlienVault
Created: 2026-09-03 12:57:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#8Base #Akira #Asia #BackDoor #BlackBasta #BlockChain #CyberSecurity #EtherHiding #Government #InfoSec #Java #JavaScript #Malware #Nodejs #OTX #OpenThreatExchange #RAT #RansomWare #Rhysida #Rust #bot #AlienVault

New post from #Panzer : Dinas Komunikasi Dan Informatika
More at : https://www.ransomlook.io/group/Panzer #Ransomware

[SETTRA] - Ransomware Victim: hansler[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-hansler-com/

#settra #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[KRYBIT] - Ransomware Victim: ligacancerguate[.]org - https://www.redpacketsecurity.com/krybit-ransomware-victim-ligacancerguate-org/

#krybit #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[PANZER] - Ransomware Victim: Dinas Komunikasi dan Informatika - https://www.redpacketsecurity.com/panzer-ransomware-victim-dinas-komunikasi-dan-informatika/

#panzer #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[SETTRA] - Ransomware Victim: int[.]diasorin[.]com - https://www.redpacketsecurity.com/settra-ransomware-victim-int-diasorin-com/

#settra #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[WALLSTREET] - Ransomware Victim: America’s Food Basket - https://www.redpacketsecurity.com/wallstreet-ransomware-victim-america-s-food-basket/

#wallstreet #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[SETTRA] - Ransomware Victim: buroboot[.]nl - https://www.redpacketsecurity.com/settra-ransomware-victim-buroboot-nl/

#settra #dark_web #data_breach #OSINT #ransomware #threatintel #tor

[VEXY RANSOMWARE] - Ransomware Victim: McDonald's Ecuador - https://www.redpacketsecurity.com/vexy-ransomware-ransomware-victim-mcdonald-s-ecuador/

#vexy_ransomware #dark_web #data_breach #OSINT #ransomware #threatintel #tor

Node.js: Old Technique Makes a Comeback

Indicators extracted from public reporting. Source: https://www.zscaler.com/blogs/security-research/c2looper-new-backdoor-likely-tied-ransomware-github-c2

Pulse ID: 6a996082aa9b2cfffc43b73d
Pulse Link: https://otx.alienvault.com/pulse/6a996082aa9b2cfffc43b73d
Pulse Author: CyberHunter_NL
Created: 2026-09-03 11:56:50

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BackDoor #CyberSecurity #GitHub #HTTP #HTTPS #InfoSec #Nodejs #OTX #OpenThreatExchange #RCE #RansomWare #Zscaler #bot #CyberHunter_NL

Dropbox Accounts Breached via Lenovo Identity Provider SSO Flaw

Dropbox confirmed that attackers accessed approximately 5,000 accounts by exploiting a flaw in Lenovo's email verification process to bypass authentication. The breach allowed unauthorized parties to view and download user files by linking fraudulent Lenovo IDs to existing Dropbox accounts.

****
#cybersecurity #infosec #incident #ransomware
https://beyondmachines.net/event_details/dropbox-accounts-breached-via-lenovo-identity-provider-sso-flaw-j-f-q-h-4/gD2P6Ple2L

[VEXY RANSOMWARE] - Ransomware Victim: Engefitas - https://www.redpacketsecurity.com/vexy-ransomware-ransomware-victim-engefitas/

#vexy_ransomware #dark_web #data_breach #OSINT #ransomware #threatintel #tor

AI Agents Execute Full Ransomware Attack in Under 10 Hours

Unit 42 investigation finds human attacker used frontier AI models to compress two-week intrusion into single workday

https://pulseofnations.lol/ai-agents-execute-full/

#AgenticAi #AI #Cybersecurity #FrontierModels #Ransomware #Unit42

AI Agents Execute Full Ransomware Attack in Under 10 Hours

Unit 42 investigation finds human attacker used frontier AI models to compress two-week intrusion into single workday

https://pulseofnations.lol/ai-agents-execute-full/

#AgenticAi #AI #Cybersecurity #FrontierModels #Ransomware #Unit42

AI Agents Execute Full Ransomware Attack in Under 10 Hours

Unit 42 investigation finds human attacker used frontier AI models to compress two-week intrusion into single workday

https://pulseofnations.lol/ai-agents-execute-full/

#AgenticAi #AI #Cybersecurity #FrontierModels #Ransomware #Unit42

AI Agents Execute Full Ransomware Attack in Under 10 Hours

Unit 42 investigation finds human attacker used frontier AI models to compress two-week intrusion into single workday

https://pulseofnations.lol/ai-agents-execute-full/

#AgenticAi #AI #Cybersecurity #FrontierModels #Ransomware #Unit42

AI Agents Execute Full Ransomware Attack in Under 10 Hours

Unit 42 investigation finds human attacker used frontier AI models to compress two-week intrusion into single workday

https://pulseofnations.lol/ai-agents-execute-full/

#AgenticAi #AI #Cybersecurity #FrontierModels #Ransomware #Unit42

New post from #Qilin : Complete Packaging Solutions
More at : https://www.ransomlook.io/group/Qilin #Ransomware

New post from #Qilin : Complete Packaging Solutions
More at : https://www.ransomlook.io/group/Qilin #Ransomware

New post from #Qilin : Complete Packaging Solutions
More at : https://www.ransomlook.io/group/Qilin #Ransomware

New post from #Qilin : Complete Packaging Solutions
More at : https://www.ransomlook.io/group/Qilin #Ransomware

New post from #Qilin : Complete Packaging Solutions
More at : https://www.ransomlook.io/group/Qilin #Ransomware

🚨New ransom group blog post!🚨

Group name: qilin
Post title: Complete Packaging Solutions
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: qilin
Post title: Complete Packaging Solutions
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: qilin
Post title: Complete Packaging Solutions
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: qilin
Post title: Complete Packaging Solutions
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: qilin
Post title: Complete Packaging Solutions
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

https://bugstoday.com/pegasus-just-infected-an-iphone-without-the-user-touching-it/

#Cybersecurity #InfoSec #CVE #Vulnerability #Security #CyberAttack #Exploit #Malware #Ransomware