Ransomware Groups 31 articles

Summary Nemty is a ransomware family that emerged in 2019, known for encrypting victims' files and demanding ransom payments for decryption keys. It primarily targets Windows-based systems and is distributed…

Summary Play is a web application framework that can be targeted by various application attacks exploiting vulnerabilities in its components or configurations. Attackers may leverage flaws in Play-based applications to…

Summary Pysa, also known as Mespinoza, is a ransomware strain primarily targeting enterprise networks by encrypting files and demanding ransom payments. It is notable for its use of double extortion…

Summary Quantum attacks refer to the potential exploitation of quantum computing capabilities to break or undermine classical cryptographic algorithms used in application security. These attacks leverage the principles of quantum…

Summary REvil Data Leak Operations refer to the tactics employed by the REvil ransomware group to exfiltrate and publicly leak sensitive data from compromised organizations. These operations are part of…

Summary Royal is a sophisticated application-layer attack targeting web applications by exploiting vulnerabilities to gain unauthorized access, manipulate data, or disrupt services. It often involves advanced techniques such as injection,…

Summary Ryuk is a ransomware strain known for targeting large organizations and demanding high ransom payments. It first appeared in 2018 and is often deployed through phishing campaigns, malicious email…

Summary Snatch is a ransomware strain known for combining traditional ransomware encryption with advanced techniques such as rootkit deployment and lateral movement to evade detection and maximize impact. It targets…

Summary WastedLocker is a ransomware strain primarily used in targeted attacks against large organizations. It encrypts files on infected systems, demanding a ransom payment in cryptocurrency to restore access. First…

Summary Yanluowang is a ransomware group known for targeting enterprise networks through sophisticated application-layer attacks. It employs advanced encryption techniques to lock victims’ data and demands ransom payments, often leveraging…

Summary Zeppelin is a type of application attack that exploits vulnerabilities in web-based notebook platforms, particularly Apache Zeppelin, to execute unauthorized code, access sensitive data, or disrupt services. Attackers leverage…