Black Basta uses brute-forcing tool to attack edge devices
The ransomware gang developed an automated framework to guess weak and reused passwords on VPNs and firewalls.
Medusa ransomware affiliate tried triple extortion scam – up from the usual double demand
The joint report issued on Wednesday by the FBI, CISA, and the Multi-State Information Sharing and Analysis Center (MS-ISAC) ...
Computer Weekly9d
Perimeter security appliances source of most ransomware hits
Perimeter security appliances and devices, particularly VPNs, prove to be the most popular entry points into victim networks for financially-motivated ransomware gangs, according to reports.
Bleeping Computer6d
Ransomware gang creates tool to automate VPN brute-force attacks
Fortinet SSL VPN, Citrix NetScaler (Citrix Gateway), Microsoft RDWeb (Remote Desktop Web Access), and WatchGuard SSL VPN. The framework searches for publicly accessible edge networking devices ...
JD Supra25d
Ghost (Cring) Ransomware: Understanding The Threat & How Enterprises Can Defend Themselves
Ensure critical vulnerabilities (e.g., ProxyShell, Fortinet VPN flaws ... to control traffic between sensitive areas. Restrict Remote Desktop Protocol (RDP) and other high-risk services to ...
Security Boulevard14d
Inside Black Basta Ransomware Group’s Chat Leak
Internal conflicts within the notorious Black Basta ransomware group have led to a massive leak of the group’s internal chat ...
Bleeping Computer22d
EncryptHub breaches 618 orgs to deploy infostealers, ransomware
Larva-208's attacks involve SMS phishing, voice phishing, and fake login pages that mimic corporate VPN products like Cisco AnyConnect, Palo Alto GlobalProtect, Fortinet, and Microsoft 365.
Zacks Investment Research on MSN15d
Buy These 3 Cybersecurity Stocks Amid Rising Cyber Threats
The cybersecurity landscape is growing complicated with every passing day, as cybercriminals are using a variety of techniques, including credential theft and abuse, remote desktop protocol attacks ...
RBC Ukraine on MSN3d
FBI and CISA warn of a new wave of ransomware attacks
The Federal Bureau of Investigation (FBI) and the US Cybersecurity and Infrastructure Security Agency (CISA) have reported a ...
Finanznachrichten9d
Coalition, Inc.: Coalition's Cyber Threat Index 2025 Finds Most Ransomware Incidents Start with Compromised VPN Devices
Remote desktop products were second-most (18% ... and software exploits (29%). Vendors such as Fortinet®, Cisco®, SonicWall®, Palo Alto Networks®, and Microsoft® build the most commonly compromised ...