Ransomware

Mastering Ransomware Defense: Your Resource for Prevention, Response, Recovery, and More.

Digital warning signs: A digital landscape, with warning signs on the screen, which depicts an alert or error.

F5 BIG-IP malware hides web shells in memory to evade detection

Steve ZurierSeptember 9, 2026

Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.

Today's Top Ransomware Headlines

Ransomware News

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

Laura FrenchSeptember 9, 2026

Researchers discovered more than 3,300 unique victims across 461 organizations.

Manager Pressing REMOTE MONITORING AND MANAGEMENT

Phishing campaign targets widely used RMM platforms in 46 countries

Steve ZurierSeptember 3, 2026

Phishing attacks trick victims into installing legitimate RMM tools for remote access.

RevStealer malware spread through fake Claude Opus 5 download

Laura FrenchSeptember 1, 2026

The Windows infostealer uses several evasion measures to remain mostly invisible to security systems.

(Credit: Robert – stock.adobe.com)

Codex ClickFix installation lure spreads suspected AMOS infostealer

Laura FrenchAugust 25, 2026

The attack uses iframes embedded in Google Sites to deliver malicious content from a trusted domain.

(Credit: Ralf – stock.adobe.com)

Black Hat/DEF CON attendees targeted in malware scheme with Google Doc lure

Laura FrenchAugust 20, 2026

A malicious Google Apps Script sidebar leads to payloads for both macOS and Windows.

(Adobe Stock)

Medusa ransomware group attacked more than 500 victims since 2021

Steve ZurierAugust 19, 2026

Medusa ransomware hit 500-plus victims, exploiting critical flaws at increasing speed.

(Credit: gguy – stock.adobe.com)

‘TWINLOOT’ Python implant abuses Microsoft services for stealthy C2

Laura FrenchAugust 19, 2026

The implant ensures defenders only see legit Microsoft services rather than unknown external domains, making it more challenging to block attacks.

CISA confirms 2025 Windows Task Host flaw exploited by ransomware groups

Steve ZurierAugust 18, 2026

Experts say teams should make this a priority, noting that the patch has been available since last November.

(Credit: Felix Geringswald – stock.adobe.com)

MacOS AmnesiaStealer malware spread through ClickFix, grants live browser control

Laura FrenchAugust 14, 2026

A fake GitHub download page hosts the malicious ClickFix command.

Akira ransomware attacker uses Safe Mode reboot to evade EDR

Laura FrenchAugust 12, 2026

The ransomware payload ultimately failed to deploy due to insufficient virtual memory.

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Ransomware Events