Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Vishing Extortion Group UNC6671 Rebrands After Millions
The vishing extortion group UNC6671, formerly BlackFile, has rebranded to Redact, Pink, Helix, and Falcon after earning millions.
CISA adds WinRAR CVE-2025-8088 to ransomware warning
CISA has confirmed that attackers are using the WinRAR vulnerability CVE-2025-8088 in ransomware attacks, months after adding the flaw to its actively exploited list. Organizations still running versions older than WinRAR 7.13 should treat archive handling as
Google Links Redact Extortion Group to BlackFile Rebrand
Google Threat Intelligence Group links the Redact extortion group to BlackFile (UNC6671), which uses vishing scams.
Ransomware Surges 19% in July After Q2 Lull
Ransomware attacks rose 19% in July versus June, hitting finance, tech, and healthcare hardest, per Comparitech analysis.
Ransom Cartel Leader Gets 16 Years
Maksim Silnikau, founder of Ransom Cartel, was sentenced to 16 years in a U.S. court for running a ransomware-as-a-service operation.
Ransomware Targets Managers: New Report
A new report reveals that ransomware attackers increasingly target managers, not just regular employees, to gain access to systems.
Ransom Cartel Creator Sentenced to 16 Years
Maksim Silnikau was sentenced to 16 years in prison for creating and operating the Ransom Cartel ransomware-as-a-service, which attacked at least 18 c
Ransom Cartel creator gets 16 years
Maksim Silnikau, creator of Ransom Cartel ransomware, was sentenced to 16 years for attacks on 18 companies, causing over $6.7 million in losses.
GENTLEMEN Ransomware Victims Seek Decryptor
Victims of GENTLEMEN ransomware are searching for decryption tools, but no official decryptor exists yet.
MedusaLocker3 Ransomware Adds .hamster65 Extension
A new MedusaLocker3 ransomware variant encrypts files with the .hamster65 extension.
Unknown Ransomware Hash 4af2aef2 Identified
A user reports encryption by an unidentified ransomware variant with SHA1 hash 4af2aef2b7a55d4a93f98035b863ed29f7a577bb, after ID Ransomware fails to
Microsoft Defender blocks QNET ransomware in 128 seconds
Microsoft Defender for Endpoint's attack disruption isolated a device 128 seconds after detecting QNET ransomware, blocking an mshta.