ransomNews

thehackernews.comAttackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwareAttackers abuse Microsoft Teams external chats and fake IT support identities to gain remote access, deploy malware, and steal data.

🚨💬 Fake Teams support chats deliver ransomware Attackers combine email bombing and IT impersonation to gain remote access, steal data and deploy #ransomware. 🔗 read more: thehackernews.com/20... #ransomNews #cyberthreats #Teams

🥷💸 US extradites suspect in $37M crypto scam Zheng Zhao faces a money-laundering conspiracy charge over a scheme allegedly defrauding at least 174 US victims. 🔗 read more: cyberscoop.com/chine... #ransomNews #cyberthreats #Fraud

darkreading.com'Gheist' Weaponizes GitHub Tokens to Steal Cloud SecretsAn ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.

⚠️ Gheist hijacks over 850 GitHub accounts Malicious workflows harvest cloud secrets through GitHub logs, then erase the runs. 🔗 read more: www.darkreading.com/... #ransomNews #cyberthreats #GitHub

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Everest 🧬 Natuzzi S.P.A. | Santeramo in Colle (BA) 🎯 settore: C - Manifatturiero 🔗 natuzzi.com 🗓️ 27 ottobre 2026

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: 03 novembre 2026 🖥️ ransomnews.online 🫯 ransomnews.github.io... #ransomNews #cybersecurity #cyberthreats

securityweek.comGenesys Hack Exposes Customer Data From Internal SystemsThe Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

17h

⚠️ #Genesys breach exposes customer business contacts Hackers accessed CRM and training systems; core customer platforms were unaffected. 🔗 read more: www.securityweek.com... #ransomNews #cyberthreats #DataBreach

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #TheGentlemen 🧬 SOME S.R.L. | Milano 🎯 settore: K - Telecom/IT 🔗 some.it 🗓️ 26 ottobre 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - 🖥️ ransomnews.online

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - 🖥️ ransomnews.online 🫯 ransomnews.github.io... #ransomNews #cybersecurity #cyberthreats

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #TheGentlemen 🧬 Spontini Holding S.R.L. | Milano 🎯 settore: O - Servizi amministrativi 🔗 spontinimilano.com 🗓️ 26 ottobre 2026

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #AUR0RA 🧬 Ernesto Malvestiti S.P.A. | Cinisello Balsamo (MI) 🎯 settore: C - Manifatturiero 🔗 malvestiti.com 🗓️ 26 ottobre 2026

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

📄 sample: sì ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: 09 novembre 2026 🖥️ ransomnews.online 🫯 ransomnews.github.io... #ransomNews #cybersecurity #cyberthreats

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Unicoop Etruria Società Cooperativa | Piombino (LI) 🎯 settore: G - Commercio 🔗 coopetruria.coop.it 🗓️ 24 ottobre 2026

ransomNews@ransomnews.online

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Coop Italia Società Cooperativa | Casalecchio di Reno (BO) 🎯 settore: G - Commercio 🔗 coop.it 🗓️ 23 ottobre 2026

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #LockBit5 🧬 Art School Società Cooperativa Sociale | Varese 🎯 settore: Q - Istruzione 🔗 dorsiacademy.it 🗓️ 24 ottobre 2026

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: 06 novembre 2026 🖥️ ransomnews.online 🫯 ransomnews.github.io... #ransomNews #cybersecurity #cyberthreats

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Audit 🧬 Zena Office S.R.L. | Piacenza 🎯 settore: G - Commercio 🔗 zenaoffice.it 🗓️ 23 ottobre 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: - 🖥️ ransomnews.online 🫯 ransomnews.github.io/RedACT

ransomNews@ransomnews.online

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Audit 🧬 Ze***ce | - 🎯 settore: - 🔗 - 🗓️ 14 ottobre 2026

📄 sample: sì ▪️ dati esfiltrati dichiarati: 250.00GB ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: 30 ottobre 2026 🖥️ ransomnews.online 🫯 ransomnews.github.io/RedACT #ransomNews #cybersecurity #cyberthreats

📣 Truffe WhatsApp, la guida utile 🇮🇹 Leggiamo sempre più spesso di persone in difficoltà dopo messaggi truffa su #WhatsApp. Cosa fare? Cosa dire? A chi? Abbiamo redatto una breve guida con le informazioni utili per un "primo soccorso". Grazie a Forenser per il consulto tecnico.

ransomnews.github.ioransomnews.github.io

Leggi subito la guida: ransomnews.github.io/coltellino/g... #ransomNews

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Qilin 🧬 Mastelli S.R.L. | Sanremo (IM) 🎯 settore: C - Manifatturiero 🔗 mastelli.com 🗓️ 18 ottobre 2026 📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: -

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

🖥️ ransomnews.online 🫯 ransomnews.github.io... #ransomNews #cybersecurity #cyberthreats

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Everest 🧬 Galleria di Base del Brennero | Bolzano 🎯 settore: N - Servizi professionali 🔗 bbt-se.com 🗓️ 17 ottobre 2026

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #SpaceBears 🧬 Alma Center Servizi Medicali S.R.L. | Mariglianella (NA) 🎯 settore: R - Sanità/Assistenza 🔗 almacenter.it 🗓️ 15 ottobre 2026

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: 31 ottobre 2026 🖥️ ransomnews.online 🫯 ransomnews.github.io... #ransomNews #cybersecurity #cyberthreats

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Audit 🧬 Ze***ce | - 🎯 settore: - 🔗 - 🗓️ 14 ottobre 2026

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: 21 ottobre 2026 🖥️ ransomnews.online 🫯 ransomnews.github.io... #ransomNews #cybersecurity #cyberthreats

malwarebytes.comHow “123456” became the key to almost 9 million personal recordsA series of security failures, including a very weak password, exposed almost 9 million people’s personal information.

⚠️🔐 Leaked password exposes 8.8 million records A leaked 123456 password reportedly unlocked Denmark’s CPR register. 🔗 read more: www.malwarebytes.com... #ransomNews #cyberthreats #DataBreach

cybertrends.itWhatsApp, nuova ondata di furti di account con falsi concorsi online - Rivista Cybersecurity TrendsLa Polizia Postale segnala una nuova ondata di truffe che sfruttano WhatsApp per sottrarre gli account degli utenti attraverso falsiLeggi di più

⚠️ Fake contests hijack WhatsApp accounts Stolen verification codes let scammers seize accounts and ask victims’ contacts for money. 🔗 read more: www.cybertrends.it/w... #ransomNews #cyberthreats #WhatsApp

gbhackers.comHackers Use AI-Generated Event Lures to Steal Google Accounts and Bypass MFAAn advanced persistent threat spear-phishing campaign targeting individuals affiliated with Taiwanese research organizations.

🚨 Fake event invitations intercept #Google logins UAT-11985 targets Taiwanese researchers with spoofed registration pages that relay MFA and steal sessions. 🔗 read more: gbhackers.com/ai-gen... #ransomNews #cyberthreats #Phishing

infosecurity-magazine.comKaraoke Giant Reveals Data Breach Impacting Eight Million Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers

🇯🇵🎤 Supplier #malware threatens 8.72 million karaoke records Daiichi Kosho warns customer and employee data may be exposed; theft remains unconfirmed. 🔗 read more: www.infosecurity-mag... #ransomNews #cyberthreats #DataBreach

securityweek.comiRhythm Data Breach Impacts at Least 360,000 PeopleHackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.

⚠️ iRhythm breach exposes over 360k patients Attackers stole identity, insurance and device data from hosted applications, then demanded a ransom. 🔗 read more: www.securityweek.com... #ransomNews #cyberthreats #Healthcare

bleepingcomputer.comLedger confirms spy chip implant behind wallet crypto theftsLedger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets.

🚨🪙 Spy implants drain Ledger hardware wallets #Ledger confirmed hardware tampering in a wallet sold through #CryptoBilis. 🔗 read more: www.bleepingcomputer... #ransomNews #cyberthreats #Crypto

thehackernews.comLow-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential ProxiesMidnight Mimosa ships in some low-cost Android firmware, silently installs apps, and uses payloads for ad fraud and residential proxies.

🚨💸 Cheap phone? Ugh! Beware some cheap android phones: preinstalled malware is not part of the official price. thehackernews.com/20... #ransomNews #Android #Malware

infosecurity-magazine.comMajor French Supermarket Chains Hit by Cyber-AttackThe CEO of Cooperative U confirmed a cyber-attack affected the food stock in several stores from October 11

🇫🇷🥷 French supermarket fridges hacked, food stocks ruined Attackers reportedly forced defrost cycles up to 50°C, causing €270k in stock losses at two stores. 🔗 read more: www.infosecurity-mag... #ransomNews #cyberthreats #OT

🚨🩺 Dexcom allegedly breached You all know this is a pretty close theme to us. Dexcom warned, early this summer, about a lot of their medical sensors being stolen. Now the alleged breach and data exfiltration. #ransomNews #healthcare #Dexcom

🗞️ ShinyHunters and how they're seen "from the outside" SuspectFile crafted quite a perfect article about their origin, the in-betweens and the latest news. Claudia and Jon DiMaggio, as well as two major threat actors, jotted their perspectives and thoughts on the group.

suspectfile.comShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group PerspectivesWhen the name ShinyHunters began appearing in underground circles in 2020, it seemed to belong to a group primarily involved in stealing and selling

Thanks @amvinfe ;)

therecord.mediaJapan confirms arrest of Russian Qilin operative, extradition to GermanyJapan’s National Police Agency confirmed the arrest and extradition to Germany of a Russian national accused of being involved in the Qilin ransomware gang.

⚠️🥷 Japan extradites suspected Qilin operative to Germany A 28-year-old Russian was arrested in Osaka in May over a German #ransomware attack and extradited in June. 🔗 read more: therecord.media/japa... #ransomNews #cyberthreats #Qilin

bleepingcomputer.comHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksHackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks.

🚨🤖 Fake Claude ads deliver ClickFix attacks #Google Ads abuse Bing redirects to push malicious Mac commands. 🔗 read more: www.bleepingcomputer... #ransomNews #cyberthreats #ClickFix

⚠️ FBI arrests ransomware negotiator over extortion Edward Dubrovsky faces conspiracy and cyber-extortion charges in the #ShinyHunters probe. 🔗 read more: krebsonsecurity.com/... #ransomNews #cyberthreats #Extortion

🚨 nuova rivendicazione #ransomware Italia 🚨 🏴‍☠️ gruppo #Majinahanashi 🧬 CFG Serramenti S.R.L. | Omobono Terme (BG) 🎯 settore: C - Manifatturiero 🔗 cfgserramenti.com 🗓️ 12 ottobre 2026

ransomnews.onlineransomNews • your to-go source for ransomware intelligenceVerified data, monthly insights, and threat intelligence on global ransomware activity.

📄 sample: - ▪️ dati esfiltrati dichiarati: - ▪️ dati esfiltrati pubblicati: - ⏲️ scadenza: 15 ottobre 2026 🖥️ ransomnews.online 🫯 ransomnews.github.io... #ransomNews #cybersecurity #cyberthreats

gbhackers.comAWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single PromptA newly disclosed attack chain in Amazon Bedrock AgentCore that could turn a single malicious prompt into credential theft and compromise of other AI agents within the same AWS account and region.

⚠️ AgentCore attack exposes credentials and conversations Researchers used prompts and excessive IAM permissions to hijack other agents; AWS has hardened the defaults. 🔗 read more: gbhackers.com/aws-be... #ransomNews #cyberthreats #AWS

securityaffairs.comUS Sentences Empire Market Co-Creator Over $430 Million Criminal MarketplaceEmpire Market co-creator was sentenced to 40 years in prison for running a dark web marketplace linked to $430 million in illegal trades.

⚠️🥷 Empire Market co-creator gets 40 years Raheim Hamilton ran a market handling over $430M. 🔗 read more: securityaffairs.com/... #ransomNews #cyberthreats #DarkWeb