LockBit

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

New on the Map — September 2026: 22 Protocol and Endpoint Scanners

Sauron Loader: A New Loader Lurking in Underground Forums

Detailed Analysis of LockBit 5.0

Detailed Analysis of DragonForce Ransomware

Ransomware Landscape in H1 2025: Statistics and Key Issues

Blind Spots in the Build: A Supply Chain & SBOM Security Primer

2026 Ransomware Cartelization: Qilin, LockBit and Akira Convergence

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

Apache ActiveMQ Exploit Leads to LockBit Ransomware

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

FamousSparrow Takes Flight with New SparroWocky Backdoor

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

China and the Cyber Arms Race for AI Supremacy

Hot Take: Operation Endgame VS SocGholish

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use

Gotta Breach 'Em All! The Journey Of ShinyHunters

Bring Your Own Vulnerable Device: The EDR Killer Economy

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Angry Birds: Toy Ghouls’ new toys

From ‘High/Medium/Low’ to Dollars: Making Cyber Risk Legible to Your CFO

Abuse.ch MalwareBazaar (1058 samples)

Abuse.ch MalwareBazaar (1035 samples)

Abuse.ch MalwareBazaar (1010 samples)