Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Synology Hit by .hrr Ransomware with READ_ME_UNLOCK_FILES
A ransomware incident on Synology devices uses the .hrr extension and a READ_ME_UNLOCK_FILES.txt note. Investigation is ongoing.
Synology DS1618+ Hit by Ransomware, .hrr Files
A Synology DS1618+ NAS was attacked by ransomware on August 20, 2026, encrypting files with .hrr extension. User seeks identification and help.
Qilin Ransomware Support: Encrypted Files Get Random
Qilin (Agenda) ransomware appends a random 10-character extension to encrypted files and leaves a recovery note. Victims seek support.
Synology NAS Hit by Ransomware with .nsm Extension
A user reports a Synology NAS infected by ransomware that encrypts files with the .nsm extension, seeking identification and help.
Viper Ransomware (Proxima/BlackShadow)
posted in Ransomware Help & Tech Support: Any help in detection would be great. Attached zip wih in 2 locked files and message file. Could not detect it with ID Ransomware Content of the message file Your ID For
Viper Ransomware
posted in Ransomware Help & Tech Support: Any help in detection would be great. Attached zip wih in 2 locked files and message file. Could not detect it with ID Ransomware Content of the message file Your ID For Decryption: 9EFEFCC
US Bank Probes LockBit Ransomware Claims
US Bank is investigating LockBit's claims of a ransomware attack, with the group setting a pay-or-leak deadline.
TurkSifre Ransomware Keeps Original File Extensions
Newer SifreCozucu/TurkSifre ransomware variants encrypt files without changing extensions, complicating detection.
Medusa Ransomware Hits 500 Critical Infrastructure Orgs
A joint advisory warns of a surge in Medusa ransomware attacks, targeting critical infrastructure including healthcare, with 500 organizations affecte
SifreCozucu/TurkSifre Ransomware Keeps File Extensions
A new SifreCozucu/TurkSifre ransomware variant in Turkey encrypts files while preserving original extensions, complicating detection.
US Bank probes LockBit breach claims, deadline set
US Bank is investigating LockBit's claim of a data breach, with the gang threatening to leak data by September 3 unless a ransom is paid.
Ransomware Affiliate Poses as Recovery Firm to Steal
A ransomware affiliate, posing as 'Ransom Busters,' contacts victims to undercut original extortion demands, but GuidePoint Security says it's a scam