Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Ransomware Hits Colombian Justice Ministry
The Colombian Justice Ministry was hit by a ransomware attack days before a presidential transition, highlighting ongoing threats to critical infrastr
Akira Ransomware Affiliate Sabotages Own Encryptor
An Akira ransomware affiliate rebooted a victim's PC into Safe Mode to disable security tools, but the move also broke their own encryptor, hindering
Gunra Ransomware Exploits Fortinet Flaws
Gunra ransomware actors exploit two Fortinet vulnerabilities to target government and critical infrastructure, per a joint US-ROK advisory.
Akira Ransomware Breaks Own Encryptor
Akira ransomware disabled victim security tools, inadvertently breaking its own encryptor and hindering its attack.
Akira Ransomware Safe Mode Attack Fails to Encrypt
Huntress reports an Akira affiliate rebooted a Windows server into Safe Mode to disable EDR, but the ransomware failed to encrypt files.
Team Punisher Ransomware Encrypts Files as .punisher
A ransomware attack by Team Punisher encrypts files with .punisher extension. System restore didn't recover all files, leaving many still infected.
DeadLock Ransomware Uses Blockchain for Extortion
DeadLock ransomware leverages Polygon smart contracts and Session messaging to harden extortion infrastructure against disruption, per Microsoft.
Magniber Ransomware Encrypts Files with .ag.kinla Extension
A laptop's photos were encrypted with the .ag.kinla extension, indicating a Magniber ransomware infection from 2022-2024.
Gunra Ransomware Exploits Fortinet Flaws, Bypasses MFA
Gunra ransomware gang uses leaked Conti code and old Fortinet vulnerabilities to breach critical infrastructure, bypassing MFA.
DeadLock ransomware uses blockchain to resist takedowns
DeadLock ransomware leverages Polygon blockchain and Session network for resilient infrastructure, listing 80 victims by July 2026.
Gunra ransomware exploits known bugs in critical
US cyber agencies warn that Gunra ransomware affiliates are exploiting known vulnerabilities to breach critical infrastructure networks.
Gunra Ransomware Hits Critical Infrastructure via Fortinet,
South Korea and U.S. agencies warn of Gunra ransomware exploiting Fortinet and Schneider Electric vulnerabilities to breach critical infrastructure gl