Robuta

https://thehacker.news/anatomy-of-ransomware-attack?source=upcoming
Watch a Live Ransomware Attack Demo, Uncover Hacker Tactics and Learn to Defend
ransomware attackanatomy
https://securityaffairs.com/126022/cyber-crime/inetum-hit-by-blackcat-ransomware.html
Dec 26, 2021 - The IT services company Inetum Group was hit by a ransomware attack a few days before the Christmas holiday.
ransomware attackfrenchservicesproviderhit
https://www.silicon.co.uk/brandvoice/quest-software-podcast-episode-2-how-to-survive-a-ransomware-attack
In this podcast we survey how ransomware has evolved and consider the practical actions businesses can take to protect their data.
quest softwarepodcast episodesurviveransomware
https://wccftech.com/crytek-customer-data-stolen-after-egregor-ransomware-attack/
Crytek has confirmed that they have been attacked by the Egregor ransomware gang, who took files that contained info on their customers.
customer dataransomware attackcrytekstolen
https://www.itnews.com.au/news/sa-gov-employee-data-stolen-in-frontier-software-ransomware-attack-573880
At least 38,000 staff impacted.
employee dataransomware attacksagovstolen
https://arcticwolf.com/incident-response-timeline-ransomware-attack-containment/
Dec 18, 2024 - Explore a real-world attack on a customer in the utilities industry and see how Arctic Wolf helped this customer both stop this attack as well as develop a...
incident responseransomware attackarctic wolftimelineamp
https://blog.talosintelligence.com/byovd-loader-deadlock-ransomware/
Cisco Talos has uncovered a new DeadLock ransomware campaign using a previously unknown BYOVD loader to exploit a Baidu Antivirus driver vulnerability, letting...
ransomware attacknewloaderbehinddeadlock
https://www.publictechnology.net/2025/11/28/news/scottish-council-hit-by-major-ransomware-attack-had-gaps-in-cybersecurity/
Two years ago the local authority for the Outer Hebrides suffered a cyber incursion that impacted delivery of frontline services and resulted in costs of...
ransomware attackscottishcouncilhitmajor
https://www.kaspersky.com.au/blog/interlock-ransomware-clickfix-attack/34902/
May 16, 2025 - The Interlock ransomware group is using the ClickFix technique to compromise corporate infrastructure. We explain how the attack works.
ransomwaregroupusesclickfixattack
https://www.phishprotection.com/phishing/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center
May 23, 2025 - A massive ransomware attack has led to a “system-wide technology outage” across a network of Ohio medical centers under Kettering Health. Both...
centersketteringhealthaffected
https://www.bankinfosecurity.com/australian-delivery-firm-confirms-ransomware-attack-a-13688
Australian transportation and logistics firm Toll Group has confirmed that it sustained a ransomware attack earlier this month that has forced the company to...
ransomware attackaustraliandeliveryfirm
https://www.csoonline.com/video/508772/what-the-colonial-pipeline-ransomware-attack-suggests-about-critical-infrastructure-security.html
May 12, 2021
colonial pipelineransomware attackcritical infrastructuresuggests
https://www.bleepingcomputer.com/news/security/uk-labour-party-discloses-data-breach-after-ransomware-attack/
The UK Labour Party notified members that some of their information was impacted in a data breach after a ransomware attack hit a third-party organization...
labour partydata breachransomware attackuk
https://www.theregister.com/2025/11/27/western_isles_ransomware_council/
Nov 27, 2025 - : Audit sympathetic toward Comhairle nan Eilean Siar as staff stretched to capacity trying to recover
ransomware attackscottishcouncilstillreeling
https://www.theregister.com/2020/09/23/doppelpaymer_german_hospital_ransomware/
Sep 24, 2020 - Same mob promised not to target healthcare facilities
ransomwarecrewfingeredattackgerman
https://www.techradar.com/pro/security/ransomware-attack-on-romanian-water-agency-hits-over-a-thousand-systems
An unknown threat actor wreaked some serious havoc across Romania
ransomware attackromanianwateragencyhits
https://cyberinsider.com/asahi-says-qilin-ransomware-attack-exposed-data-of-1-5-million-people/
Nov 27, 2025 - Asahi confirmed that a ransomware attack that disrupted its operations in September, exposed the personal data of over 1.5 million people.
ransomware attackasahisaysqilinexposed
https://www.pcmag.com/news/acer-falls-victim-to-50-million-ransomware-attack
Mar 20, 2021 - Hacker group REvil appears to be the perpetrator behind the breach, which could have been facilitated by a Microsoft Exchange vulnerability.
ransomware attackacerfallsvictimmillion
https://www.cybersecuritydive.com/news/suffolk-county-ignored-threat-warnings/727352/
A special report blames county officials for ignoring FBI warnings during the 2022 attack and an overall failure of IT and security leadership.
suffolk countyransomware attacklinkedlackplanning
https://www.trendmicro.com/en_us/research/25/k/s3-ransomware.html
breakingransomwarevariantsattackpaths
https://news.sophos.com/en-us/2021/10/04/atom-silo-ransomware-actors-use-confluence-exploit-dll-side-load-for-stealthy-attack/
A new ransomware operator uses stealthy techniques, but borrows heavily from other players.
atomsiloransomwareactorsuse
https://www.bleepingcomputer.com/news/security/university-of-hawaii-cancer-center-hit-by-ransomware-attack/
​University of Hawaii says a ransomware gang breached its Cancer Center in August 2025, stealing data of study participants, including documents from the...
cancer centerransomware attackuniversityhawaiihit
https://www.malwarebytes.com/blog/news/2021/06/jbs-says-it-is-recovering-quickly-from-a-ransomware-attack
Jan 15, 2026 - JBS, one of the world's largest meat and poultry processors, suffered a ransomware attack that shut down some of their plants.
ransomware attackjbssaysrecoveringquickly
https://therecord.media/top-aces-ransomware-attack-lockbit
May 4, 2023 - Top Aces, which provides adversary aircraft used in fighter jet pilot training, showed up on the leak site for the LockBit ransomware group.
ransomware attackcanadianfighterjettraining
https://www.bleepingcomputer.com/news/security/mands-confirms-social-engineering-led-to-massive-ransomware-attack/
M&S confirmed today that the retail outlet's network was initially breached in a
social engineeringransomware attackconfirmsledmassive
https://sqmagazine.co.uk/asahi-ransomware-data-breach-confirmed/
Nov 28, 2025 - Asahi confirms ransomware attack exposed data of 2 million customers and employees, disrupting Japan operations and delaying financial results.
data breachransomware attackasahiconfirmsmassive
https://www.cybersecuritydive.com/news/colonial-pipeline-ransomware-recovery/600129/
While the company has not disclosed the attack vector, one expert said its quick recovery could be a post-breach success story.
colonial pipelineransomware attackbeginsfueldelivery
https://www.healthcarefacilitiestoday.com/posts/Central-Jersey-Medical-Center-Reports-Ransomware-Attack--30721
Health care facilities professionals learn about: At this time, there is no evidence that patient information has been misused.
central jerseymedical centerransomware attackreportssecurity
https://www.cnn.com/2025/05/20/politics/ransomware-attack-medical-centers
May 20, 2025 - A ransomware attack has triggered a “system-wide technology outage” at a network of over a dozen medical centers in Ohio, causing the cancellation of...
ransomware attacktriggerstechoutagelarge
https://www.govinfosecurity.com/nhs-ransomware-attack-healthcare-industry-infrastructures-are-critical-a-25547?rf=RAM_AlsoBeInterestedIn
Healthcare organizations are particularly vulnerable to ransomware, risking significant data loss. Steve Stone, head of Rubrik's Zero Labs, outlines why...
ransomware attackhealthcare industrynhsinfrastructurescritical
https://www.networkworld.com/article/2515594/cisco-talos-analyzes-attack-chains-network-ransomware-tactics.html
Apr 30, 2025 - Cisco’s Talos security intelligence group recently analyzed ransomware groups to identify common techniques and offer recommendations to help security team...
cisco talosanalyzesattackchainsnetwork
https://www.bleepingcomputer.com/news/security/hyundai-motor-europe-hit-by-black-basta-ransomware-attack/
Car maker Hyundai Motor Europe suffered a Black Basta ransomware attack, with the threat actors claiming to have stolen three terabytes of corporate data.
hyundai motorransomware attackeuropehitblack
https://roblucas.com.au/statement-re-ransomware-cyber-attack-directed-at-frontier-software/
Mar 20, 2023 - Discover the latest insights on Statement Re Ransomware Cyber Attack Directed At Frontier Software. Read about South Australian politics, policies, and...
cyber attackstatementransomwaredirectedfrontier
https://www.bleepingcomputer.com/news/security/romanian-energy-provider-hit-by-gentlemen-ransomware-attack/
A ransomware attack hit Oltenia Energy Complex (Complexul Energetic Oltenia), Romania's largest coal-based energy producer, on the second day of Christmas,...
ransomware attackromanianenergyproviderhit
https://www.bleepingcomputer.com/news/security/computer-giant-acer-hit-by-50-million-ransomware-attack/
Computer giant Acer has been hit by a REvil ransomware attack where the threat actors are demanding the largest known ransom to date, $50,000,000.
ransomware attackcomputergiantacerhit
https://www.computerweekly.com/news/366631592/Cyber-attack-that-downed-airport-systems-confirmed-as-ransomware
Sep 22, 2025 - Authorities in Europe say the cyber attack that caused disruption to passenger-facing services at multiple airports, including Heathrow, was the result of...
cyber attackairport systemsconfirmedransomwarecomputer
https://www.bleepingcomputer.com/news/security/global-it-services-provider-inetum-hit-by-ransomware-attack/
Less than a week before the Christmas holiday, French IT services company Inetum Group was hit by a ransomware attack that had a limited impact on the business...
ransomware attackglobalservicesproviderhit
https://cyberscoop.com/incident-responders-plead-guilty-ransomware-digitalmint/
Dec 19, 2025 - Ryan Goldberg and Kevin Martin were working at cybersecurity companies when they switched sides and hit five companies with ransomware attacks in 2023.
plead guiltyransomware attackformerincidentspree
https://www.computerworld.com/article/1619575/bharat-bytes-it-training-shortfall-industry-4-0-it-workers-upskilling-ransomware-attack-increase-ci.html
May 28, 2025 - Bharat Bytes is Computerworld India’s regular round-up of news from the world of IT.
bharatbytestrainingshortfallindustry
https://www.bleepingcomputer.com/news/security/mcmenamins-breweries-hit-by-a-conti-ransomware-attack/
Portland brewery and hotel chain McMenamins suffered a Conti ransomware attack over the weekend that disrupted the company's operations.
ransomware attackbrewerieshitconti
https://www.theregister.com/2021/06/30/salvation_army_ransomware_attack/
Jun 30, 2021 - Christian org becomes latest victim of latter-day IT scourge
salvation armyukinternationalcharityhit
https://www.bleepingcomputer.com/news/security/south-korean-giant-kyowon-confirms-data-theft-in-ransomware-attack/
The Kyowon Group (Kyowon), a South Korean conglomerate, disclosed that a cyberattack has disrupted its operations and customer information may have been...
south koreandata theftransomware attackgiantconfirms
https://www.techtimes.com/articles/266661/20211014/second-acer-cyberattack-2021-now-confirmed-hackers-deny-ransomware-attack.htm
Oct 14, 2021 - The second Acer cyberattack this 2021 has been confirmed after hackers announced they have access to the company's servers.
ransomware attacksecondacercyberattackconfirmed
https://firecompass.com/dartmouth-college-data-breach/
Nov 25, 2025 - The Dartmouth College Data Breach 2025 involved a Clop ransomware attack exposing sensitive data of over 1,494 people. Learn how the breach happened and key...
dartmouth collegedata breachransomware attackclop
https://www.totalsecurity.com/blog/asahi-ransomware-attack-may-have-leaked-personal-data/
Oct 20, 2025 - Japan’s brewing giant Asahi has revealed that personal data may have been stolen during the ransomware cyber attack in late September.
ransomware attackpersonal dataasahimayleaked
https://www.computerweekly.com/news/366629849/Ransomware-attack-volumes-up-nearly-three-times-on-2024
Aug 25, 2025 - During the first six months of 2025, the number of observed and tracked ransomware attacks far outpaced the volume seen last year.
ransomware attackthree timesvolumesnearlycomputer
https://handwiki.org/wiki/Engineering:WannaCry_ransomware_attack
Feb 4, 2024 - The WannaCry ransomware attack was a worldwide cyberattack in May 2017 by the WannaCry ransomware cryptoworm, which targeted computers running the Microsoft...
ransomware attackengineeringwannacryhandwiki
https://www.kaspersky.co.in/blog/unitedhealth-ransomware-attack/28604/
Feb 20, 2025 - We assess the largest ransomware incident of 2024 — the attack on UnitedHealth, and its impact on the company and its customers.
ransomware attackcompletestoryunitedhealth
https://techzone.bitdefender.com/en/white-papers/ransomware-whitepaper.html
Stopping Ransomware White Paper: A Technical Deep Dive into Attack Vectors & Mitigation Strategies with Bitdefender
deep divestoppingransomwaretechnicalattack
https://www.bleepingcomputer.com/news/security/healthcare-giant-ascension-redirects-ambulances-after-suspected-Black-Basta-ransomware-attack/
Ascension, a major U.S. healthcare network, is diverting ambulances from several hospitals due to a suspected ransomware attack that has been causing clinical...
ransomware attackascensionredirectsambulancessuspected
https://www.bleepingcomputer.com/news/security/toronto-public-library-confirms-data-stolen-in-ransomware-attack/
The Toronto Public Library (TPL) confirmed that the personal information of employees, customers, volunteers, and donors was stolen from a compromised file...
public libraryransomware attacktorontoconfirmsdata
https://www.techtimes.com/articles/269210/20211210/frontier-software-ransomware-attack-puts-80-000-government-employees-high.htm
Dec 10, 2021 - SA public servants could potentially lose their data after a ransomware attack ruled over Frontier Software. Here's everything you need to know about this...
ransomware attackfrontiersoftwareputsleast
https://www.itnews.asia/news/ransomware-gang-qilin-claims-attack-on-japans-asahi-breweries-620895
Orders, shipments and customer support affected as the company investigates.
ransomwaregangqilinclaimsattack
https://www.itpro.com/security/ransomware/360122/up-to-1500-organizations-compromised-in-kaseya-ransomware-attack
The White House has urged potential victims of the attack to report their security concerns to the Internet Crime Complaint Center
ransomware attackorganizationscompromised
https://www.cybersecuritydive.com/news/mks-ransomware-200-million-revenue/644000/
The technology supplier for semiconductor manufacturing and advanced electronics had to temporarily halt some of its operations, disrupting its supply...
ransomware attackmksinstrumentssaysfebruary
https://www.kaspersky.co.in/blog/interlock-ransomware-clickfix-attack/28862/
May 16, 2025 - The Interlock ransomware group is using the ClickFix technique to compromise corporate infrastructure. We explain how the attack works.
ransomwaregroupusesclickfixattack
https://internetmuseum.se/tidslinjen/coop-tvingas-stanga-butiker-efter-ransomware-attack/
Jan 13, 2023 - En majoritet av Coops butiker tvingas stänga när deras centrala kassasystem drabbas av en hacker-attack som gör det omöjligt att betala för maten.
ransomware attackcoopbutikerinternetmuseum
https://www.channelnewsasia.com/singapore/in-focus-singapore-ransomware-attacks-cybersecurity-csa-2036881
SINGAPORE: Imagine being in a large, dark house - there are cameras, but you can't see in all the corners.   This is how Mr Eric Nagel, general manager...
focusreadysingaporemajorransomware
https://www.kaspersky.com/blog/interlock-ransomware-clickfix-attack/53414/
May 16, 2025 - The Interlock ransomware group is using the ClickFix technique to compromise corporate infrastructure. We explain how the attack works.
ransomwaregroupusesclickfixattack
https://www.techzine.eu/news/security/104760/ncr-hit-by-a-ransomware-attack-causing-outages/
Apr 18, 2023 - NCR, a prominent retail point-of-sale provider and provider of automated teller machine technology, has announced that it was hit by a ransomware attack
ransomware attacktechzine globalncrhitcausing
https://www.cybersecuritydive.com/news/nevada-ransomware-attack-traced-back-to-malware-download-by-employee/805011/
The state refused to pay a ransom and recovered 90% of the impacted data.
ransomware attacknevadatracedbackmalware
https://www.bleepingcomputer.com/news/security/airport-disruptions-in-europe-caused-by-a-ransomware-attack/
The disruptions over the weekend at several major European airports were caused by a ransomware attack targeting the check-in and boarding systems.
ransomware attackairportdisruptionseuropecaused
https://www.bleepingcomputer.com/news/security/co-op-confirms-data-theft-after-dragonforce-ransomware-claims-attack/
The Co-op cyberattack is far worse than initially reported, with the company now confirming that data was stolen for a significant number of current and past...
data theftcoopransomwareclaims
https://www.itnews.com.au/news/chris-21-payroll-software-provider-hit-by-suspected-ransomware-attack-572800
Impacting Aussie customers.
payroll softwareransomware attackchrisproviderhit
https://www.cybersecuritydive.com/news/pharmaceutical-inotiv-ransomware-disrupted/758159/
The company says it doesn’t yet know if the incident will have a material impact.
ransomware attackpharmaceuticalfirminvestigatingdisrupted
https://www.techtarget.com/searchitoperations/tip/Dissect-open-source-ransomware-code-to-understand-an-attack
Nov 14, 2022 - Understanding how ransomware works can help organizations prevent devastating cyber attacks. Get started by walking through this ransomware code example.
open sourcedissectransomwarecodeunderstand
https://www.cybersecuritydive.com/news/agriculture-food-ransomware-coop/607080/
A Minnesota-based co-op became the second agricultural firm in recent days to be the target of ransomware, just weeks after the FBI and CISA warned of a wider...
customer dataransomwarecompromisesfarmop
https://specopssoft.com/our-case-studies/resetting-insecure-passwords-after-ransomware-attack/
Aug 5, 2025 - Reviewing password management was already on the agenda when a group of hackers used weak and hacked passwords to carry out a ransomware attack on the...
ransomware attackcase studyquicklyinsecurepasswords