Category
Ransomware
202 articles
Booba Project Ransomware: Profile, IOCs, and Incident Response
Booba ransomware (Booba Project) steals data before encrypting it. Learn who it targets, its IOCs, and what to do if it hits your network.
Rhysida Ransomware: Attack Chain, IOCs, and Recovery Options
Rhysida ransomware encrypts Windows and ESXi and auctions stolen data. Get its attack chain, IOCs, ATT&CK mapping, detection signals, and recovery options.
Chaos Ransomware: Threat Profile, Attack Chain, IOCs, and Incident Response Guide
Understand the Chaos RaaS operation (and how to tell it apart from the 2021 builder). Get the attack chain, IOCs, MITRE ATT&CK mapping, and IR guidance.
ShinyHunters: Attack Lifecycle, IOCs, and Incident Response Guide
ShinyHunters threat analysis: how the group steals data through vishing, OAuth token abuse, and a PeopleSoft zero-day, plus IOCs and incident response steps.
Storm Ransomware Threat Analysis: Operational Extortion Campaign & Victim Inflation Tactics
Storm is a ransomware group that emerged in August 2026 and listed 60+ victims in a month. Get the threat profile, probable TTPs, IOCs, and IR guidance.
CRPxO Ransomware: Attack Chain, IOCs, and MITRE ATT&CK TTPs
CRPxO is a 2026 extortion operation pairing ClickFix delivery with crypto theft and double extortion. Get the attack chain, IOCs, MITRE ATT&CK mapping, and IR guidance.
BlackSuit Ransomware: VPN Brute-Force Attack Chain, TTPs, and IOCs from a 9-Day Intrusion
BlackSuit ransomware breached a network through a password-only VPN account and reached enterprise-wide encryption in nine days. See the full attack chain, MITRE ATT&CK mapping, and IOCs from a Proven Data DFIR investigation
LockBit 3.0 (LockBit Black) Ransomware: Attack Chain, TTPs, and MSP Incident Response Guide
LockBit 3.0 claimed over 2,000 victims across 95 countries. Get the full attack chain, MITRE ATT&CK mapping, IOCs, and IR checklist for security teams and MSPs.
Orova Ransomware: Threat Profile, Leak-Site Analysis, and Incident Response Guidance
Orova ransomware emerged in May 2026 and targets healthcare and SMBs across the US, Hong Kong, and Taiwan. Threat profile, IOCs, and IR guidance.
Genesis Ransomware: Threat Actor Profile
Genesis ransomware is an active double-extortion group with 111 claimed victims since October 2025. Full attack chain, sector targeting, MITRE ATT&CK mapping, and IR guidance for security teams.
DeadLock Ransomware: Attack Lifecycle, TTPs, IOCs, and Response
DeadLock ransomware: BYOVD kernel EDR evasion, Polygon-backed negotiation, double extortion. Full attack lifecycle, IOCs, ATT&CK mapping, and IR guidance.
SETTRA Ransomware: Emerging Double-Extortion Threat
SETTRA is an active ransomware group first seen in June 2026. Review known victims, attack lifecycle, IOCs, MITRE mapping, and a defender security checklist.