Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Building a ransomware decision tree before the call comes in
In this Help Net Security video, Kerri Shafer-Page, VP of Incident Response at Arctic Wolf, walks through the ransomware decision tree in this video. She covers four areas where decisions need settling in advance, starting with containment. Someone has to kno
Conti ransomware member sentenced to 4 years in prison
Oleksii Lytvynenko was sentenced to four years for his role in Conti ransomware attacks.
Fake GTA 6 malware is on the rise as release date nears — here are some of the worst scams to look out for
Huntress warns fake GTA 6 ISOs spreading malware ahead of official Nov 19, 2026 releasePackages deliver RATs, infostealers, and Chaos ransomware disguised as game installers
SloppyRAT: A New Tool For Ransomware Attacks
IntroductionIn June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being delivered through a multi-stage ClickFix infection chain. Th
MantaxOtax Android Malware Combines Ransomware With Spyware
MantaxOtax Android malware has combined file encryption with extensive surveillance, letting attackers steal messages, credentials and device data while restricting access to infected phones. In a t
ShinyHunters Extortion Moves to Identity, Where Ransomware Defenses Do Not Reach
Your backups are current and your downtime plan is rehearsed, and this attack never touches either one. A phone call and a lookalike login page are now doing what encryption once did, at far greater scale. Source: ShinyHunters Extortion Moves to Identity, Whe
Ukrainian National Sentenced to Four Years in Prison for Wire Fraud Conspiracy in Connection with Conti Ransomware
Oleksii Oleksiyovych Lytvynenko, 44, a Ukrainian national, was sentenced today to four years in prison for conspiracy to commit wire fraud in connection with a conspiracy to deploy Conti, a ransomware variant that infected the computers of more than 1,000 vic
Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)
State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC), which is used for centrally managing multiple Cisco Secure Firewall de
Ransom Cartel Creator Gets 16-Year Prison Sentence
Maksim Silnikau, creator and administrator of the Ransom Cartel ransomware operation, was sentenced to 16 years in prison.
Google warns extortion crews target AI data
Google's Mandiant reports extortion gangs stealing proprietary AI data and models, demanding ransoms.
Ransomware Negotiations Become Business Process
Intel 471's Dave Ross explains how ransomware groups use structured negotiation tactics, including victim research, to maximize payouts.
User Seeks Help Identifying Old .cfltngn Ransomware
A user requests help identifying an old ransomware that encrypted files with a .cfltngn extension, possibly Magniber, hoping for a decryption method.