Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Old .cfltngn Ransomware Unidentified by ID Ransomware
A user seeks help identifying an old .cfltngn ransomware variant that ID Ransomware could not recognize, hoping for a future decryption method.
Rhysida leaks 1.4M Berlin gov records
Rhysida ransomware breached Berlin's state government, stealing 1.44 million files. Berlin refused the 30 BTC ransom, prompting a full data leak.
Minnesota County Hit by Second Ransomware Attack
Winona County paid $128,539 after a January 2026 attack, then suffered a second ransomware incident in April by different actors.
Rhysida Publishes Berlin Government Data After Refused
Berlin's state government confirmed Rhysida ransomware gang published stolen data on the dark web after the city refused to pay a €2 million extortion
Ransomware Hits Organization, Damages Computers
A ransomware attack has infected multiple computers in an organization, damaging personal documents. The incident is under investigation.
Medusa Ransomware Hits 500+ U.S. Critical Infrastructure
Federal advisory confirms Medusa ransomware breached over 500 organizations in critical U.S. sectors as of April 2026.
Berlin Ransomware Leak Exposes State Secrets
Berlin refused a 30 Bitcoin ransom, leading hackers to leak 6TB of sensitive state administration and national defense data on the dark web.
Stealer Ransomware Hits Without Note
A ransomware attack, identified as Stealer with .cryptedmicro extension, struck without leaving a ransom note, encrypting media files.
Nilson Ransomware Encrypts Files, Demands Ransom
Nilson ransomware (linked to Proxima/BlackShadow) encrypts files and leaves a ransom note. Victims are instructed to contact attackers for decryption.
Nilson Ransomware Encrypts Files, Demands Ransom
A new ransomware named Nilson encrypts documents, photos, and databases, leaving a ransom note (Nilson_Help.txt) with case ID 0C7EF2E1879D36D2.
Berlin reviews stolen data after ransomware leak
Berlin's state government is urgently reviewing data published by a ransomware group, with investigators working to assess the breach's impact.
Proton/Shinra Ransomware Adds .vricpe Extension
Files encrypted by Proton/Shinra ransomware get .vricpe extension. Victims seek decryption help.