English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어

#ransomnews search results

ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 24

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #M3RX 🧬 ROTAK S.R.L. | Priolo Gargallo (SR) 🎯 settore: automotive 🔗 rotak.it 🗓️ 24 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #M3RX 🧬 ROTAK S.R.L. | Priolo Gargallo (SR) 🎯 settore: automotive 🔗 rotak.it 🗓️ 24 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews
0
1
3
0
642
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 24

⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz M3RX 🗓️ added on April 24 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz M3RX 🗓️ added on April 24 #ransomNews #cybersecurity #newthreatactor
0
2
2
0
315
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ One NHS trust is still stuck on paper At least one Synnovis-hit trust still lacked restored pathology systems, with 161k delayed reports and critical blood results being relayed by phone and manual PDF uploads. #ransomNews #NHS #Healthcare

ransomnews's tweet image. ⚠️ One NHS trust is still stuck on paper At least one Synnovis-hit trust still lacked restored pathology systems, with 161k delayed reports and critical blood results being relayed by phone and manual PDF uploads. #ransomNews #NHS #Healthcare
0
1
4
1
517
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 15

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #akira 🧬 CSA S.P.A. | Milano 🎯 settore: servizi marittimi 🔗 csaspa.com 🗓️ 14 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #akira 🧬 CSA S.P.A. | Milano 🎯 settore: servizi marittimi 🔗 csaspa.com 🗓️ 14 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews
0
4
5
1
1K
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 25

⚠️ SSO breach points to Salesforce data theft #ShinyHunters claims an employee Okta vishing attack exposed ADT Salesforce data, with 10M records threatened for leak by 27 Apr 2026. 🔗 bleepingcomputer.com/news/security/… #ransomNews #Okta #vishing

ransomnews's tweet image. ⚠️ SSO breach points to Salesforce data theft #ShinyHunters claims an employee Okta vishing attack exposed ADT Salesforce data, with 10M records threatened for leak by 27 Apr 2026. 🔗 bleepingcomputer.com/news/security/… #ransomNews #Okta #vishing
0
0
3
1
277
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

🚨 Your hotel PIN became the weakest link in travel Booking.com officially confirmed unauthorized access to reservation-linked data and reset PINs after exposure of names, emails, addresses, phone numbers and guest-property messages. #ransomNews #databreach #travel

ransomnews's tweet image. 🚨 Your hotel PIN became the weakest link in travel Booking.com officially confirmed unauthorized access to reservation-linked data and reset PINs after exposure of names, emails, addresses, phone numbers and guest-property messages. #ransomNews #databreach #travel
0
2
3
1
516
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ #PowerOff just burned millions of booter user traces A 21-country crackdown seized 53 DDoS-for-hire domains, arrested 4 suspects, sent 75k warnings, and exposed more than 3 million criminal user accounts. #ransomNews #cybercrime #ddos #lawenforcement

ransomnews's tweet image. ⚠️ #PowerOff just burned millions of booter user traces A 21-country crackdown seized 53 DDoS-for-hire domains, arrested 4 suspects, sent 75k warnings, and exposed more than 3 million criminal user accounts. #ransomNews #cybercrime #ddos #lawenforcement
0
2
5
1
569
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ Source code and IDs sit inside alleged 250GB banker leak The claimed #CIBN breach goes beyond contact data: a 250GB dump allegedly includes source code, membership records, identification documents, certificates, and residential and business addresses. #ransomNews

DailyDarkWeb's profile picture. We work in the dark to bring clarity to the light. Session: 052cb7645ebcb762d4aea000a925405a5bab63b5e5432ab333a57fb39914809c7b
Dark Web Intelligence
@DailyDarkWeb
Apr 20

Nigeria 🇳🇬 - The Chartered Institute of Bankers of Nigeria has allegedly suffered a data breach exposing a 250GB database containing members' personal information, identification documents, and source codes. dailydarkweb.net/the-chartered-…

DailyDarkWeb's tweet image. Nigeria 🇳🇬 - The Chartered Institute of Bankers of Nigeria has allegedly suffered a data breach exposing a 250GB database containing members' personal information, identification documents, and source codes. dailydarkweb.net/the-chartered-…
31
97
304
139
62K
0
0
3
0
296
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 15

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Gruppo ICM S.P.A. | Vicenza 🎯 settore: consulenza 🔗 gruppoicm.com 🗓️ 15 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Gruppo ICM S.P.A. | Vicenza 🎯 settore: consulenza 🔗 gruppoicm.com 🗓️ 15 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews
1
4
4
2
1K
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 25

⚠️ NASA staff targeted via fake meeting invites Attackers posing as Chinese officials used phishing meeting requests to trick #NASA employees into installing malware, enabling credential theft and potential network access escalation. 🔗 thehackernews.com/2026/04/nasa-e… #ransomNews

ransomnews's tweet image. ⚠️ NASA staff targeted via fake meeting invites Attackers posing as Chinese officials used phishing meeting requests to trick #NASA employees into installing malware, enabling credential theft and potential network access escalation. 🔗 thehackernews.com/2026/04/nasa-e… #ransomNews
0
1
0
0
174
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 19

🚨 Access brokers industrialize ransomware entry at scale T1erOne describes selling initial access (RDP/VPN) to affiliates, pricing networks by revenue and security posture, turning corporate breaches into a structured supply chain feeding ransomware operations #ransomNews

club31337's profile picture. Threat Intelligence & Security Research • Telegram: https://t.co/dyJBoFbrgr
club1337
@club31337
Apr 18

In January, the seizure of #RAMP disrupted the #ransomware community, forcing many actors to disperse across restricted forums such as #T1erOne and #Rehub. @insidedarknet conducted an exclusive interview with a @tieroneforum administrator. buymeacoffee.com/insidedarknet/…

club31337's tweet image. In January, the seizure of #RAMP disrupted the #ransomware community, forcing many actors to disperse across restricted forums such as #T1erOne and #Rehub. @insidedarknet conducted an exclusive interview with a @tieroneforum administrator. buymeacoffee.com/insidedarknet/…
4
5
36
14
4K
0
1
6
1
703
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ Vercel’s “non-sensitive” flag became the breach pivot A Context.ai compromise let attackers hijack one employee account, reach internal systems, and expose a limited subset of customer credentials after enumerating env vars. #ransomNews #Vercel #SupplyChain

ransomnews's tweet image. ⚠️ Vercel’s “non-sensitive” flag became the breach pivot A Context.ai compromise let attackers hijack one employee account, reach internal systems, and expose a limited subset of customer credentials after enumerating env vars. #ransomNews #Vercel #SupplyChain
0
1
3
1
171
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

🚨 One poisoned README could quietly own your Mac Straiker says #Cursor could chain prompt injection, shell builtin blind spots and remote tunnel abuse into persistent shell access with no extra user action beyond opening a repo. #ransomNews #devsecops #RCE #AI

ransomnews's tweet image. 🚨 One poisoned README could quietly own your Mac Straiker says #Cursor could chain prompt injection, shell builtin blind spots and remote tunnel abuse into persistent shell access with no extra user action beyond opening a repo. #ransomNews #devsecops #RCE #AI
0
2
3
1
501
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ Extensions hijack sessions instead of just stealing data At least 12 fake #TikTok downloader extensions inject scripts to capture Facebook session cookies, enabling full account takeover without credentials across Chrome and Edge installs. #ransomNews #BrowserSecurity

ransomnews's tweet image. ⚠️ Extensions hijack sessions instead of just stealing data At least 12 fake #TikTok downloader extensions inject scripts to capture Facebook session cookies, enabling full account takeover without credentials across Chrome and Edge installs. #ransomNews #BrowserSecurity
0
1
4
1
512
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 14

🚨 S.A.E. Scientifica 🇮🇹 Unauthorized access to a corporate mailbox via stolen employee credentials was detected and remediated. Account disabled, sessions revoked, passwords reset, MFA enforced, and no further compromise found. Clients have been notified. #ransomNews

ransomnews's tweet image. 🚨 S.A.E. Scientifica 🇮🇹 Unauthorized access to a corporate mailbox via stolen employee credentials was detected and remediated. Account disabled, sessions revoked, passwords reset, MFA enforced, and no further compromise found. Clients have been notified. #ransomNews
0
1
3
0
386
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 13

⚠️ Fake AI site installs RAT with sideloading trick A spoofed #Claude AI website delivers PlugX RAT via DLL sideloading, abusing legitimate signed executables to evade detection and establish persistent remote access on infected systems. #ransomNews #Malware #RAT

ransomnews's tweet image. ⚠️ Fake AI site installs RAT with sideloading trick A spoofed #Claude AI website delivers PlugX RAT via DLL sideloading, abusing legitimate signed executables to evade detection and establish persistent remote access on infected systems. #ransomNews #Malware #RAT
0
1
1
0
577
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

🚨 Europe’s biggest gym chain lost more than check-in logs #BasicFit says attackers stole member data from about 1 million people across six countries, including birth dates, bank details, addresses, phones and membership information. #ransomNews #databreach

ransomnews's tweet image. 🚨 Europe’s biggest gym chain lost more than check-in logs #BasicFit says attackers stole member data from about 1 million people across six countries, including birth dates, bank details, addresses, phones and membership information. #ransomNews #databreach
0
0
2
1
164
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 13

⚠️ Mobile money platforms drive surge in national fraud losses #Zimbabwe recorded a sharp rise in cyber fraud cases tied to mobile money and banking platforms, with attackers exploiting weak user awareness and SIM swap tactics to bypass account security controls #ransomNews

ransomnews's tweet image. ⚠️ Mobile money platforms drive surge in national fraud losses #Zimbabwe recorded a sharp rise in cyber fraud cases tied to mobile money and banking platforms, with attackers exploiting weak user awareness and SIM swap tactics to bypass account security controls #ransomNews
0
1
1
1
539
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ A 13-year-old ActiveMQ flaw is now a live breach path CISA says CVE-2026-34197 is being exploited, and on some 6.0.0–6.1.1 setups another bug can expose #Jolokia so the issue effectively becomes unauthenticated RCE. #ransomNews #vulnerability #RCE

ransomnews's tweet image. ⚠️ A 13-year-old ActiveMQ flaw is now a live breach path CISA says CVE-2026-34197 is being exploited, and on some 6.0.0–6.1.1 setups another bug can expose #Jolokia so the issue effectively becomes unauthenticated RCE. #ransomNews #vulnerability #RCE
0
1
3
1
310
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 13

🚨 Retail breaches linked through single threat actor campaign #CoinbaseCartel claims simultaneous breaches of Carter’s, Ralph Lauren, and Helzberg, suggesting coordinated attacks against multiple retail targets to harvest payment and customer data at scale. #ransomNews

ransomnews's tweet image. 🚨 Retail breaches linked through single threat actor campaign #CoinbaseCartel claims simultaneous breaches of Carter’s, Ralph Lauren, and Helzberg, suggesting coordinated attacks against multiple retail targets to harvest payment and customer data at scale. #ransomNews
0
1
1
3
536
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
May 2

⚠️ New threat actor on the radar ⚠️ 🥷🏻 CMD Organization 🗓️ added on May 2, 2026 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 CMD Organization 🗓️ added on May 2, 2026 #ransomNews #cybersecurity #newthreatactor
0
2
3
0
820
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 30

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Abazia S.P.A. | Felizzano (AL) 🎯 settore: componenti auto 🔗 abazia.com 🗓️ 30 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: sì ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Abazia S.P.A. | Felizzano (AL) 🎯 settore: componenti auto 🔗 abazia.com 🗓️ 30 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: sì ⏲️ scadenza: - #ransomNews
0
4
6
0
938
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 30

⚠️ SAP packages turned CI secrets into loot Four official #SAP npm packages were backdoored on April 29 with a malicious preinstall that stole #GitHub and npm tokens, SSH keys, cloud creds, Kubernetes secrets and CI/CD data. 🔗 read more: bleepingcomputer.com/news/security/… #ransomNews

ransomnews's tweet image. ⚠️ SAP packages turned CI secrets into loot Four official #SAP npm packages were backdoored on April 29 with a malicious preinstall that stole #GitHub and npm tokens, SSH keys, cloud creds, Kubernetes secrets and CI/CD data. 🔗 read more: bleepingcomputer.com/news/security/… #ransomNews
0
0
2
0
152
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 29

⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz Aur0ra 🗓️ added on April 29, 2026 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz Aur0ra 🗓️ added on April 29, 2026 #ransomNews #cybersecurity #newthreatactor
0
3
10
2
2K
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 28

⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz MNT6 🗓️ added on April 28, 2026 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz MNT6 🗓️ added on April 28, 2026 #ransomNews #cybersecurity #newthreatactor
0
2
7
1
1K
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 25

⚠️ NASA staff targeted via fake meeting invites Attackers posing as Chinese officials used phishing meeting requests to trick #NASA employees into installing malware, enabling credential theft and potential network access escalation. 🔗 thehackernews.com/2026/04/nasa-e… #ransomNews

ransomnews's tweet image. ⚠️ NASA staff targeted via fake meeting invites Attackers posing as Chinese officials used phishing meeting requests to trick #NASA employees into installing malware, enabling credential theft and potential network access escalation. 🔗 thehackernews.com/2026/04/nasa-e… #ransomNews
0
1
0
0
174
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 25

⚠️ SSO breach points to Salesforce data theft #ShinyHunters claims an employee Okta vishing attack exposed ADT Salesforce data, with 10M records threatened for leak by 27 Apr 2026. 🔗 bleepingcomputer.com/news/security/… #ransomNews #Okta #vishing

ransomnews's tweet image. ⚠️ SSO breach points to Salesforce data theft #ShinyHunters claims an employee Okta vishing attack exposed ADT Salesforce data, with 10M records threatened for leak by 27 Apr 2026. 🔗 bleepingcomputer.com/news/security/… #ransomNews #Okta #vishing
0
0
3
1
277
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 24

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #M3RX 🧬 ROTAK S.R.L. | Priolo Gargallo (SR) 🎯 settore: automotive 🔗 rotak.it 🗓️ 24 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #M3RX 🧬 ROTAK S.R.L. | Priolo Gargallo (SR) 🎯 settore: automotive 🔗 rotak.it 🗓️ 24 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews
0
1
3
0
642
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 24

⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz M3RX 🗓️ added on April 24 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz M3RX 🗓️ added on April 24 #ransomNews #cybersecurity #newthreatactor
0
2
2
0
315
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ Extensions hijack sessions instead of just stealing data At least 12 fake #TikTok downloader extensions inject scripts to capture Facebook session cookies, enabling full account takeover without credentials across Chrome and Edge installs. #ransomNews #BrowserSecurity

ransomnews's tweet image. ⚠️ Extensions hijack sessions instead of just stealing data At least 12 fake #TikTok downloader extensions inject scripts to capture Facebook session cookies, enabling full account takeover without credentials across Chrome and Edge installs. #ransomNews #BrowserSecurity
0
1
4
1
512
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ ANTS leak spared documents but raised phishing risk ANTS said the April 15 incident did not expose submitted attachments or enable account access, but leaked personal data from individual and business accounts still creates phishing and identity-abuse risk. #ransomNews

ransomnews's tweet image. ⚠️ ANTS leak spared documents but raised phishing risk ANTS said the April 15 incident did not expose submitted attachments or enable account access, but leaked personal data from individual and business accounts still creates phishing and identity-abuse risk. #ransomNews
0
3
5
1
668
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ Source code and IDs sit inside alleged 250GB banker leak The claimed #CIBN breach goes beyond contact data: a 250GB dump allegedly includes source code, membership records, identification documents, certificates, and residential and business addresses. #ransomNews

DailyDarkWeb's profile picture. We work in the dark to bring clarity to the light. Session: 052cb7645ebcb762d4aea000a925405a5bab63b5e5432ab333a57fb39914809c7b
Dark Web Intelligence
@DailyDarkWeb
Apr 20

Nigeria 🇳🇬 - The Chartered Institute of Bankers of Nigeria has allegedly suffered a data breach exposing a 250GB database containing members' personal information, identification documents, and source codes. dailydarkweb.net/the-chartered-…

DailyDarkWeb's tweet image. Nigeria 🇳🇬 - The Chartered Institute of Bankers of Nigeria has allegedly suffered a data breach exposing a 250GB database containing members' personal information, identification documents, and source codes. dailydarkweb.net/the-chartered-…
31
97
304
139
62K
0
0
3
0
296
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ #PowerOff just burned millions of booter user traces A 21-country crackdown seized 53 DDoS-for-hire domains, arrested 4 suspects, sent 75k warnings, and exposed more than 3 million criminal user accounts. #ransomNews #cybercrime #ddos #lawenforcement

ransomnews's tweet image. ⚠️ #PowerOff just burned millions of booter user traces A 21-country crackdown seized 53 DDoS-for-hire domains, arrested 4 suspects, sent 75k warnings, and exposed more than 3 million criminal user accounts. #ransomNews #cybercrime #ddos #lawenforcement
0
2
5
1
569
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

🚨 Europe’s biggest gym chain lost more than check-in logs #BasicFit says attackers stole member data from about 1 million people across six countries, including birth dates, bank details, addresses, phones and membership information. #ransomNews #databreach

ransomnews's tweet image. 🚨 Europe’s biggest gym chain lost more than check-in logs #BasicFit says attackers stole member data from about 1 million people across six countries, including birth dates, bank details, addresses, phones and membership information. #ransomNews #databreach
0
0
2
1
164
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ A 13-year-old ActiveMQ flaw is now a live breach path CISA says CVE-2026-34197 is being exploited, and on some 6.0.0–6.1.1 setups another bug can expose #Jolokia so the issue effectively becomes unauthenticated RCE. #ransomNews #vulnerability #RCE

ransomnews's tweet image. ⚠️ A 13-year-old ActiveMQ flaw is now a live breach path CISA says CVE-2026-34197 is being exploited, and on some 6.0.0–6.1.1 setups another bug can expose #Jolokia so the issue effectively becomes unauthenticated RCE. #ransomNews #vulnerability #RCE
0
1
3
1
310
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

🚨 One poisoned README could quietly own your Mac Straiker says #Cursor could chain prompt injection, shell builtin blind spots and remote tunnel abuse into persistent shell access with no extra user action beyond opening a repo. #ransomNews #devsecops #RCE #AI

ransomnews's tweet image. 🚨 One poisoned README could quietly own your Mac Straiker says #Cursor could chain prompt injection, shell builtin blind spots and remote tunnel abuse into persistent shell access with no extra user action beyond opening a repo. #ransomNews #devsecops #RCE #AI
0
2
3
1
501
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

🚨 Your hotel PIN became the weakest link in travel Booking.com officially confirmed unauthorized access to reservation-linked data and reset PINs after exposure of names, emails, addresses, phone numbers and guest-property messages. #ransomNews #databreach #travel

ransomnews's tweet image. 🚨 Your hotel PIN became the weakest link in travel Booking.com officially confirmed unauthorized access to reservation-linked data and reset PINs after exposure of names, emails, addresses, phone numbers and guest-property messages. #ransomNews #databreach #travel
0
2
3
1
516
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ Rhysida’s failed auction still burned 330k patients A Tennessee hospital says a July 2025 intrusion exposed SSNs, medical data and financial details, after #Rhysida claimed 500GB and 330k stolen files. #ransomNews #ransomware #healthcare #databreach

ransomnews's tweet image. ⚠️ Rhysida’s failed auction still burned 330k patients A Tennessee hospital says a July 2025 intrusion exposed SSNs, medical data and financial details, after #Rhysida claimed 500GB and 330k stolen files. #ransomNews #ransomware #healthcare #databreach
0
1
2
0
481
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ One NHS trust is still stuck on paper At least one Synnovis-hit trust still lacked restored pathology systems, with 161k delayed reports and critical blood results being relayed by phone and manual PDF uploads. #ransomNews #NHS #Healthcare

ransomnews's tweet image. ⚠️ One NHS trust is still stuck on paper At least one Synnovis-hit trust still lacked restored pathology systems, with 161k delayed reports and critical blood results being relayed by phone and manual PDF uploads. #ransomNews #NHS #Healthcare
0
1
4
1
517
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ Vercel’s “non-sensitive” flag became the breach pivot A Context.ai compromise let attackers hijack one employee account, reach internal systems, and expose a limited subset of customer credentials after enumerating env vars. #ransomNews #Vercel #SupplyChain

ransomnews's tweet image. ⚠️ Vercel’s “non-sensitive” flag became the breach pivot A Context.ai compromise let attackers hijack one employee account, reach internal systems, and expose a limited subset of customer credentials after enumerating env vars. #ransomNews #Vercel #SupplyChain
0
1
3
1
171
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ One NHS trust is still stuck on paper At least one Synnovis-hit trust still lacked restored pathology systems, with 161k delayed reports and critical blood results being relayed by phone and manual PDF uploads. #ransomNews #NHS #Healthcare

ransomnews's tweet image. ⚠️ One NHS trust is still stuck on paper At least one Synnovis-hit trust still lacked restored pathology systems, with 161k delayed reports and critical blood results being relayed by phone and manual PDF uploads. #ransomNews #NHS #Healthcare
0
1
4
1
517
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 24

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #M3RX 🧬 ROTAK S.R.L. | Priolo Gargallo (SR) 🎯 settore: automotive 🔗 rotak.it 🗓️ 24 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #M3RX 🧬 ROTAK S.R.L. | Priolo Gargallo (SR) 🎯 settore: automotive 🔗 rotak.it 🗓️ 24 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews
0
1
3
0
642
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 24

⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz M3RX 🗓️ added on April 24 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz M3RX 🗓️ added on April 24 #ransomNews #cybersecurity #newthreatactor
0
2
2
0
315
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 25

⚠️ SSO breach points to Salesforce data theft #ShinyHunters claims an employee Okta vishing attack exposed ADT Salesforce data, with 10M records threatened for leak by 27 Apr 2026. 🔗 bleepingcomputer.com/news/security/… #ransomNews #Okta #vishing

ransomnews's tweet image. ⚠️ SSO breach points to Salesforce data theft #ShinyHunters claims an employee Okta vishing attack exposed ADT Salesforce data, with 10M records threatened for leak by 27 Apr 2026. 🔗 bleepingcomputer.com/news/security/… #ransomNews #Okta #vishing
0
0
3
1
277
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 15

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #akira 🧬 CSA S.P.A. | Milano 🎯 settore: servizi marittimi 🔗 csaspa.com 🗓️ 14 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #akira 🧬 CSA S.P.A. | Milano 🎯 settore: servizi marittimi 🔗 csaspa.com 🗓️ 14 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews
0
4
5
1
1K
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
May 2

⚠️ New threat actor on the radar ⚠️ 🥷🏻 CMD Organization 🗓️ added on May 2, 2026 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 CMD Organization 🗓️ added on May 2, 2026 #ransomNews #cybersecurity #newthreatactor
0
2
3
0
820
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 12

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Lamashtu 🧬 EFO Service S.R.L. | Roma 🎯 settore: servizi di pulizia 🔗 - 🗓️ 12 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews #cyberthreats

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Lamashtu 🧬 EFO Service S.R.L. | Roma 🎯 settore: servizi di pulizia 🔗 - 🗓️ 12 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews #cyberthreats
0
2
5
0
870
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

🚨 Your hotel PIN became the weakest link in travel Booking.com officially confirmed unauthorized access to reservation-linked data and reset PINs after exposure of names, emails, addresses, phone numbers and guest-property messages. #ransomNews #databreach #travel

ransomnews's tweet image. 🚨 Your hotel PIN became the weakest link in travel Booking.com officially confirmed unauthorized access to reservation-linked data and reset PINs after exposure of names, emails, addresses, phone numbers and guest-property messages. #ransomNews #databreach #travel
0
2
3
1
516
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 25

⚠️ NASA staff targeted via fake meeting invites Attackers posing as Chinese officials used phishing meeting requests to trick #NASA employees into installing malware, enabling credential theft and potential network access escalation. 🔗 thehackernews.com/2026/04/nasa-e… #ransomNews

ransomnews's tweet image. ⚠️ NASA staff targeted via fake meeting invites Attackers posing as Chinese officials used phishing meeting requests to trick #NASA employees into installing malware, enabling credential theft and potential network access escalation. 🔗 thehackernews.com/2026/04/nasa-e… #ransomNews
0
1
0
0
174
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 20

⚠️ Vercel’s “non-sensitive” flag became the breach pivot A Context.ai compromise let attackers hijack one employee account, reach internal systems, and expose a limited subset of customer credentials after enumerating env vars. #ransomNews #Vercel #SupplyChain

ransomnews's tweet image. ⚠️ Vercel’s “non-sensitive” flag became the breach pivot A Context.ai compromise let attackers hijack one employee account, reach internal systems, and expose a limited subset of customer credentials after enumerating env vars. #ransomNews #Vercel #SupplyChain
0
1
3
1
171
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

🚨 Europe’s biggest gym chain lost more than check-in logs #BasicFit says attackers stole member data from about 1 million people across six countries, including birth dates, bank details, addresses, phones and membership information. #ransomNews #databreach

ransomnews's tweet image. 🚨 Europe’s biggest gym chain lost more than check-in logs #BasicFit says attackers stole member data from about 1 million people across six countries, including birth dates, bank details, addresses, phones and membership information. #ransomNews #databreach
0
0
2
1
164
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 14

🚨 S.A.E. Scientifica 🇮🇹 Unauthorized access to a corporate mailbox via stolen employee credentials was detected and remediated. Account disabled, sessions revoked, passwords reset, MFA enforced, and no further compromise found. Clients have been notified. #ransomNews

ransomnews's tweet image. 🚨 S.A.E. Scientifica 🇮🇹 Unauthorized access to a corporate mailbox via stolen employee credentials was detected and remediated. Account disabled, sessions revoked, passwords reset, MFA enforced, and no further compromise found. Clients have been notified. #ransomNews
0
1
3
0
386
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ Extensions hijack sessions instead of just stealing data At least 12 fake #TikTok downloader extensions inject scripts to capture Facebook session cookies, enabling full account takeover without credentials across Chrome and Edge installs. #ransomNews #BrowserSecurity

ransomnews's tweet image. ⚠️ Extensions hijack sessions instead of just stealing data At least 12 fake #TikTok downloader extensions inject scripts to capture Facebook session cookies, enabling full account takeover without credentials across Chrome and Edge installs. #ransomNews #BrowserSecurity
0
1
4
1
512
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 30

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Abazia S.P.A. | Felizzano (AL) 🎯 settore: componenti auto 🔗 abazia.com 🗓️ 30 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: sì ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Abazia S.P.A. | Felizzano (AL) 🎯 settore: componenti auto 🔗 abazia.com 🗓️ 30 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: sì ⏲️ scadenza: - #ransomNews
0
4
6
0
938
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 29

⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz Aur0ra 🗓️ added on April 29, 2026 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz Aur0ra 🗓️ added on April 29, 2026 #ransomNews #cybersecurity #newthreatactor
0
3
10
2
2K
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 13

⚠️ Stolen Slack data exposes internal game development pipeline #ShinyHunters claim #Rockstar breach stems from compromised Slack, leaking internal messages, source-related data, and development insights. #ransomNews #DataBreach #DevSecOps

ransomnews's tweet image. ⚠️ Stolen Slack data exposes internal game development pipeline #ShinyHunters claim #Rockstar breach stems from compromised Slack, leaking internal messages, source-related data, and development insights. #ransomNews #DataBreach #DevSecOps
0
2
3
2
1K
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 21

⚠️ #PowerOff just burned millions of booter user traces A 21-country crackdown seized 53 DDoS-for-hire domains, arrested 4 suspects, sent 75k warnings, and exposed more than 3 million criminal user accounts. #ransomNews #cybercrime #ddos #lawenforcement

ransomnews's tweet image. ⚠️ #PowerOff just burned millions of booter user traces A 21-country crackdown seized 53 DDoS-for-hire domains, arrested 4 suspects, sent 75k warnings, and exposed more than 3 million criminal user accounts. #ransomNews #cybercrime #ddos #lawenforcement
0
2
5
1
569
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 15

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Gruppo ICM S.P.A. | Vicenza 🎯 settore: consulenza 🔗 gruppoicm.com 🗓️ 15 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews

ransomnews's tweet image. 🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Gruppo ICM S.P.A. | Vicenza 🎯 settore: consulenza 🔗 gruppoicm.com 🗓️ 15 aprile 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - #ransomNews
1
4
4
2
1K
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 13

🚨 Retail breaches linked through single threat actor campaign #CoinbaseCartel claims simultaneous breaches of Carter’s, Ralph Lauren, and Helzberg, suggesting coordinated attacks against multiple retail targets to harvest payment and customer data at scale. #ransomNews

ransomnews's tweet image. 🚨 Retail breaches linked through single threat actor campaign #CoinbaseCartel claims simultaneous breaches of Carter’s, Ralph Lauren, and Helzberg, suggesting coordinated attacks against multiple retail targets to harvest payment and customer data at scale. #ransomNews
0
1
1
3
536
ransomnews's profile picture. Decoding #ransomware groups since before Bitcoin existed. Deep threat intel for defenders who actually read the tech writeups.
ransomNews
@ransomnews
Apr 28

⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz MNT6 🗓️ added on April 28, 2026 #ransomNews #cybersecurity #newthreatactor

ransomnews's tweet image. ⚠️ New threat actor on the radar ⚠️ 🥷🏻 Prinz MNT6 🗓️ added on April 28, 2026 #ransomNews #cybersecurity #newthreatactor
0
2
7
1
1K

Something went wrong.


Something went wrong.


United States Trends