Rogue ransomware affiliate poses as recovery firm to steal payments
Teaser from the source
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete stolen data for a fee. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on ransomware
Other advisories
- HighCVE-2026-78386RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses. Location records associated with ransomware…
- HighCVE-2026-78380RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external notification chann…
- CriticalCVE-2026-0257Palo Alto Networks PAN-OS GlobalProtect auth bypass (CVE-2026-0257) now used by Qilin and Inc ransomware
- HighCVE-2026-5967TeamT5 ThreatSonar Anti-Ransomware: Betriebssystem-Befehlsinjektion
- HighCVE-2026-5966TeamT5 ThreatSonar Anti-Ransomware: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-5967TeamT5 ThreatSonar Anti-Ransomware: Betriebssystem-Befehlsinjektion
- HighCVE-2026-5966TeamT5 ThreatSonar Anti-Ransomware: Pfadüberschreitung (Path Traversal)
- HighCVE-2025-62002BullWall Ransomware Containment: fehlerhaft implementierte Sicherheitsprüfung
Other news entries
- Nefilim and Hive ransomware affiliate gets 70 months in prisonNewsBleepingComputer
- Japan's GMO urges customers to shut down PCs amid ransomware threatNewsBleepingComputer
- UNM Health ransomware attack disrupts patient care, surgeriesNewsBleepingComputer
- External Teams Chats Anchor 15-Minute Malware DeliveryNewsDark Reading
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwareNewsThe Hacker News
- UNM Health cyberattack diverts ambulances and closes clinics; BYOD ransomware group claims data theftBreachpwn.watch
- Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute IntrusionsNewsThe Hacker News
- In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS RansomwareNewsSecurityWeek
ID