Logo
Unit42 Logo
  • Tools
  • ATOMs
  • Security Consulting
  • About Us
  • Under Attack?

Category: Ransomware

CL0P Seeds ^_- Gotta Catch Em All!A pictorial representation of the Cl0P ransomware gang. A hand offers money to another hand holding keys. In the background is a computer screen with the biohazard symbol on it.
908
people reacted

CL0P Seeds ^_- Gotta Catch Em All!

  • By Jeff White
  • September 29, 2023 at 4:00 AM

1

18 min. read

Ransomware Delivery URLs: Top Campaigns and TrendsA pictorial representation of ransomware, including ransomware delivered by URLs. The Palo Alto Networks and Unit 42 logos.
5,604
people reacted

Ransomware Delivery URLs: Top Campaigns and Trends

  • By Nabeel Mohamed, Fang Liu, Sophia Yao, Lee Wei Yeong, Song Yang and Shan Huang
  • July 28, 2023 at 6:00 AM

15

8 min. read

Trending

  • Threat Group Assessment: Muddled Libra (Updated) by Unit 42
  • Unit 42 Attack Surface Threat Research: Constant Change in Cloud Contributes to 45% of New High/Critical Exposures Per Month by Unit 42
  • Wireshark Tutorial: Display Filter Expressions by Brad Duncan
  • Wireshark Tutorial: Changing Your Column Display by Brad Duncan
  • Unit 42 Researchers Discover Multiple Espionage Operations Targeting Southeast Asian Government by Robert Falcone
Threat Group Assessment: Mallox RansomwareA pictorial representation of the Mallox ransomware gang. A hand offers money to another hand holding keys. In the background is a computer screen with the biohazard symbol on it.
8,608
people reacted

Threat Group Assessment: Mallox Ransomware

  • By Lior Rochberger and Shimi Cohen
  • July 20, 2023 at 10:15 AM

19

10 min. read

Threat Assessment: Royal RansomwareA pictorial representation of ransomware like Royal Ransomware. It shows an exchange of money for keys in front of a laptop screen.
74,985
people reacted

Threat Assessment: Royal Ransomware

  • By Doel Santos, Daniel Bunce and Anthony Galiette
  • May 9, 2023 at 6:00 AM

9

11 min. read

Vice Society: A Tale of Victim Data Exfiltration via PowerShell, aka Stealing off the LandA pictorial representation of ransomware like Vice Society. It shows an exchange of money for keys in front of a laptop screen.
84,215
people reacted

Vice Society: A Tale of Victim Data Exfiltration via PowerShell, aka Stealing off the Land

  • By Ryan Chapman
  • April 13, 2023 at 6:00 AM

16

16 min. read

Unit 42 Ransomware and Extortion Report Highlights: Multi-Extortion Tactics Continue to RiseThe covers of the Ransomware and Extortion Report and the MITRE ATT&CK Framework
61,592
people reacted

Unit 42 Ransomware and Extortion Report Highlights: Multi-Extortion Tactics Continue to Rise

  • By Unit 42
  • March 21, 2023 at 2:00 AM

11

3 min. read

Bee-Ware of Trigona, An Emerging Ransomware StrainA pictorial representation of ransomware like Trigona. It shows an exchange of money for keys in front of a laptop screen.
69,857
people reacted

Bee-Ware of Trigona, An Emerging Ransomware Strain

  • By Frank Lee and Scott Roland
  • March 16, 2023 at 6:00 AM

26

18 min. read

Vice Society: Profiling a Persistent Threat to the Education SectorImage showing illustrative example of ransomware like Vice Society with a hand offering money to a second hand holding a key with a computer screen showing a virus image on it
70,845
people reacted

Vice Society: Profiling a Persistent Threat to the Education Sector

  • By JR Gumarin
  • December 6, 2022 at 3:00 AM

31

13 min. read

Ransom Cartel Ransomware: A Possible Connection With REvilRansomware conceptual image, covering threat actors such as Ransom Cartel
72,477
people reacted

Ransom Cartel Ransomware: A Possible Connection With REvil

  • By Amer Elsad and Daniel Bunce
  • October 14, 2022 at 6:00 AM

21

17 min. read

Threat Assessment: Black Basta Ransomware
89,884
people reacted

Threat Assessment: Black Basta Ransomware

  • By Amer Elsad
  • August 25, 2022 at 12:00 PM

62

12 min. read

BlueSky Ransomware: Fast Encryption via MultithreadingRansomware conceptual image, covering groups including BlueSky Ransomware
85,528
people reacted

BlueSky Ransomware: Fast Encryption via Multithreading

  • By Muhammad Umer Khan, Lee Wei, Yang Ji and Wenjun Hu
  • August 10, 2022 at 12:00 PM

1142

7 min. read

Novel News on Cuba Ransomware: Greetings From Tropical ScorpiusRansomware conceptual image, covering groups such as Cuba Ransomware aka Tropical Scorpius
91,334
people reacted

Novel News on Cuba Ransomware: Greetings From Tropical Scorpius

  • By Anthony Galiette, Daniel Bunce, Doel Santos and Shawn Westfall
  • August 9, 2022 at 9:00 AM

81

20 min. read

Exposing HelloXD Ransomware and x4kA conceptual image representing ransomware, including HelloXD.
55,706
people reacted

Exposing HelloXD Ransomware and x4k

  • By Daniel Bunce and Doel Santos
  • June 10, 2022 at 6:00 PM

21

15 min. read

LockBit 2.0: How This RaaS Operates and How to Protect Against ItA conceptual image representing ransomware, such as LockBit 2.0, discussed here.
71,849
people reacted

LockBit 2.0: How This RaaS Operates and How to Protect Against It

  • By Amer Elsad, JR Gumarin and Abigail Barr
  • June 9, 2022 at 6:00 AM

44

16 min. read

Understanding REvil: REvil Threat Actors May Have Returned (Updated)A conceptual image representing the REvil threat actors discussed in the post.
114,552
people reacted

Understanding REvil: REvil Threat Actors May Have Returned (Updated)

  • By Doel Santos and John Martineau
  • June 3, 2022 at 1:00 PM

79

12 min. read

Popular Resources

  • Resource Center
  • Blog
  • Communities
  • Tech Docs
  • Unit 42
  • Sitemap

Legal Notices

  • Privacy
  • Terms of Use
  • Documents

Account

  • Manage Subscriptions
  •  
  • Report a Vulnerability

© 2023 Palo Alto Networks, Inc. All rights reserved.