Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Cl0p targets Philips and Shell in recent attacks
Cl0p hacking group targeted Philips and Shell. Philips confirmed the attack, while Shell acknowledged a possible incident.
Microsoft Cloud Backup Gaps Under Scrutiny
Ransomware attacks can disable SaaS data in Microsoft's cloud, and recovery speed depends on backup capabilities Microsoft never guaranteed.
M365 and Azure Data at Risk from Ransomware
Microsoft 365 and Azure data may be vulnerable to ransomware, despite assumptions of built-in protection. A reality check is needed.
PhDec Decryptor Fails on Non-Standard ID Format
A ransomware victim reports PhDec decryptor errors due to non-standard ID format, despite matching 8Base template and Phobos-based encryption.
Akira Ransomware Fails After Safe Mode Reboot
An Akira affiliate's attempt to evade EDR by rebooting into Safe Mode backfired, preventing encryption.
Storm-1175 Swaps Medusa for New StormEncryptor Ransomware
Microsoft reports China-linked Storm-1175 now uses StormEncryptor ransomware, replacing Medusa in recent attacks.
Lockbit 3.0 Ransomware Hits Business, .2z0ulF4QF
A business was attacked by Lockbit 3.0 ransomware on 12 August 2026, which encrypted files with the .2z0ulF4QF extension.
Unknown Ransomware Hits Business on Aug 12
A business was attacked by ransomware on 12 August 2026, seeking help to identify the strain and find decryption options.
Babuk Ransomware Support: .babuk, .babyk, .crYptA
Babuk/Babyk Locker ransomware encrypts files with extensions like .babuk, .babyk, and .crYptA. This support topic provides help for victims.
Company Files Encrypted in Ransomware Attack
A company's files were encrypted in a ransomware attack, with a ransom note left behind.
Akira ransomware fails in Safe Mode after killing security
An Akira affiliate rebooted a victim into Safe Mode to disable security tools, but the limited memory broke their own encryptor.
Synology Hit by Unknown .hrr Ransomware
A Synology device was infected with unknown ransomware that appends .hrr to files and drops three ransom notes, including READ_ME_UNLOCK_FILES.txt.