Ransomware affiliates associated with groups like Ryuk, Conti, and Diavol have increasingly relied on the modular TrickBot malware to facilitate sophisticated extortion campaigns, resulting in over US$724 million in cryptocurrency theft. Originally emerging in 2016 as a banking Trojan, TrickBot has transformed into a versatile malware platform that supports initial access, credential theft, and lateral […]

Artificial Intelligence and Quantum getty In mid-2025, we are entering the early stages of a new age of digital transformation where networked technologies that combine engineering, computer algorithms, and culture are becoming impactful on a global scale. The upcoming digital revolution and technological convergence will drastically affect our patterns of living, working, and networking in […]

Published On : 2025-08-01 Ransomware of the week CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while monitoring various forums. This includes multiple – industries, geography, and technology – that could be relevant to your organization. Type: RansomwareTarget Technologies: Windows IntroductionCYFIRMA Research and Advisory Team has found GAGAKICK Ransomware […]

The cybersecurity landscape continues to evolve as ransomware groups adopt increasingly sophisticated tactics to maximize their financial gains. The TrickBot malware family has emerged as a central component in a massive cryptocurrency extortion scheme, with ransomware-as-a-service (RaaS) groups leveraging this versatile banking trojan to facilitate attacks worth over US$724 million in cryptocurrency. TrickBot, originally designed […]

A sophisticated new ransomware threat has emerged from the cybercriminal underground, targeting both Android and Windows platforms with dual capabilities that extend far beyond traditional file encryption. Anubis ransomware, first identified in November 2024, represents a concerning evolution in malware design, combining the destructive power of ransomware with the credential-stealing techniques of banking trojans. This […]

Ransomware activity has skyrocketed in the ever-evolving cyber threat landscape, with Bitsight’s State of the Underground 2025 study indicating a 53% increase in ransomware group-operated leak sites and a roughly 25% increase in unique victims reported on leak sites throughout 2024. Amid this escalation, the Anubis ransomware variant has emerged as a formidable player, first […]

Reporting Cybercrime If you are a Pennsylvania citizen who is the victim of a cybercrime, report the crime to your local law enforcement agency. If you are a Pennsylvania citizen who is victim of a cybercrime and experienced monetary loss because of the crime, report the crime to: your local law enforcement agency, and the […]

When a group of states created the Multi-State Information Sharing and Analysis Center (MS-ISAC) nearly 25 years ago, the goal was to coordinate and strengthen cybersecurity, both for state agencies as well as their local governments. This was in the aftermath of 9/11, a time when much of the nation was focused on security as […]

Check Point Research (CPR) conducted a focused analysis of Storm-2603, a threat actor associated with recent ToolShell exploitations, together with other Chinese APT groups. Storm-2603 utilizes a custom malware Command and Control (C2) framework dubbed internally by the attacker as “ak47c2”. This framework includes at least two different types of clients: HTTP-based (dubbed by us […]

Mid Florida Primary Care, based in Leesburg and Summerfield, Florida, recently experienced a data breach involving unauthorized access to sensitive patient and business information. The incident began when the BianLian ransomware group claimed responsibility for infiltrating the practice’s network, posting evidence of the attack on the dark web on Dec. 14, 2024. According to the […]