RansomHub

Madman Theory Ignites Wild Scattered Lapsus$ Hunter’s Playbook

Cybercrime, Fraud Management & Cybercrime, Ransomware Chaos Theory Meets Ransomware, Creating Unpredictable Outcomes Mathew J. Schwartz (euroinfosec) • October 17, 2025 Image: Shutterstock Once predominantly a forte of Russian cybercriminals evading law enforcement, a surge in ransomware activity is now attributed to reckless teenagers from the West who operate under…

Read MoreMadman Theory Ignites Wild Scattered Lapsus$ Hunter’s Playbook

From $22M Ransom to Over 100M Stolen Records: Key SaaS Threat Actors to Monitor in 2025

Certainly! Here’s a rewritten version of the provided content tailored for a tech-savvy professional audience, focusing on clarity and factual reporting while incorporating relevant cybersecurity frameworks. Cyber Threat Landscape in 2024: Rising Challenges for SaaS Security As we approach the end of 2024, the cybersecurity landscape reveals a troubling surge…

Read MoreFrom $22M Ransom to Over 100M Stolen Records: Key SaaS Threat Actors to Monitor in 2025

Experts Discover Common Codebase Connecting Morpheus and HellCat Ransomware Payloads

Recent investigations into the operations of HellCat and Morpheus ransomware have uncovered significant overlaps in their coding, suggesting a collaboration or shared framework among these cybercriminal entities. According to analysis conducted by SentinelOne, artifacts submitted to the VirusTotal scanning platform in late December 2024 indicate that the ransomware payloads used…

Read MoreExperts Discover Common Codebase Connecting Morpheus and HellCat Ransomware Payloads

RansomHub Named 2024’s Leading Ransomware Group, Targeting Over 600 Organizations Worldwide

Rise of RansomHub: A Resurgent Threat in Cybercrime The RansomHub ransomware-as-a-service (RaaS) group has emerged as a significant player in the cybercrime landscape, capitalizing on previously patched vulnerabilities in Microsoft Active Directory and the Netlogon protocol to facilitate unauthorized access to victim networks. Recent analyses highlight the group’s ability to…

Read MoreRansomHub Named 2024’s Leading Ransomware Group, Targeting Over 600 Organizations Worldwide

⚡ THN Weekly Recap: Stolen Google Secrets, Windows Breach, Latest Crypto Scams, and More!

This week’s cybersecurity update delves into various evolving threats, including a sophisticated phishing technique used by Russian threat actors. Covering issues from device code phishing to cloud-based attacks, this summary transforms complex technicalities into comprehensible insights, tailored for tech-savvy professionals. ⚡ Threat of the Week The recent disclosure from Microsoft…

Read More⚡ THN Weekly Recap: Stolen Google Secrets, Windows Breach, Latest Crypto Scams, and More!

Medusa Ransomware Strikes Over 40 Victims in 2025, Demanding Ransoms Ranging from $100K to $15M

Medusa Ransomware Campaign Targets Diverse Sectors, Rising Threats Persist The Medusa ransomware group has intensified its activities since its emergence in January 2023, reportedly claiming close to 400 victims across various sectors. Recent statistics reveal a significant 42% surge in financially motivated attacks between 2023 and 2024. In the first…

Read MoreMedusa Ransomware Strikes Over 40 Victims in 2025, Demanding Ransoms Ranging from $100K to $15M

Medusa Ransomware Employs Malicious Driver to Bypass Anti-Malware Using Stolen Certificates

Recent reports indicate that the Medusa ransomware-as-a-service (RaaS) group is employing a malicious driver named ABYSSWORKER in a sophisticated attack utilizing a bring your own vulnerable driver (BYOVD) strategy aimed at sabotaging anti-malware systems. According to Elastic Security Labs, a recent incident involving Medusa ransomware utilized a loader that had…

Read MoreMedusa Ransomware Employs Malicious Driver to Bypass Anti-Malware Using Stolen Certificates

VanHelsing RaaS Launch: 3 Targets, $5K Entry Fee, Multi-Platform Support, and Double Extortion Strategies

The cybersecurity landscape has recently been shaken by the launch of a ransomware-as-a-service (RaaS) operation named VanHelsing, which has already targeted three victims since its inception on March 7, 2025. The ransoms demanded by VanHelsing have reached staggering amounts, totaling as high as $500,000. This model facilitates participation from a…

Read MoreVanHelsing RaaS Launch: 3 Targets, $5K Entry Fee, Multi-Platform Support, and Double Extortion Strategies