Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
GLOBAL SECRET GROUP: 2026-07-26 Mass Victim Posting — Tech & Finance Sector Targeting via Critical VPN & RMM Exploits
Threat Intelligence Briefing: GLOBAL SECRET GROUP Date: 2026-07-27 Source: Ransomware.live / Dark Web Leak Site Monitoring Analyst: Security...
QILIN Ransomware: 16 New Victims in Global Surge — Education & Healthcare Sectors in Crosshairs as Critical CVEs Exploited
QILIN Ransomware: 16 New Victims in Global Surge — Education & Healthcare Sectors in Crosshairs as Critical CVEs Exploited Threat Actor Prof...
EXFILSQUAD Ransomware: Surge in Critical Infrastructure Targeting — 14 New Victims & CVE Exploitation Analysis
Threat Actor Profile — EXFILSQUAD Aliases & Operational Model: EXFILSQUAD operates as a highly aggressive Ransomware-as-a-Service (RaaS) ent...
INCRANSOM Ransomware: Cross-Border Healthcare & Legal Sector Targeting — Critical CVE Exploitation
Threat Actor Profile — INCRANSOM Aliases & Structure: INCRANSOM (also tracked as Inc Ransom) operates as a Ransomware-as-a-Service (RaaS) af...
DEADLOCK Ransomware: Global Manufacturing & Gov Sector Assault — IOCs & Detection Engineering
Threat Actor Profile — DEADLOCK Aliases: None confirmed (Single operation under DEADLOCK brand). Operational Model: RaaS (Ransomware-as-a-Se...
MONEYMESSAGE Gang: US Transportation & Energy Under Siege — Critical Firewall & Remote Access Exploitation
Threat Actor Profile — MONEYMESSAGE Aliases & Affiliation: MONEYMESSAGE is a relatively new but aggressive player in the ransomware-as-a-ser...
KILLSEC Gang: 3 New US/IN Victims — Financial & Healthcare Targeting & Detection Rules
Threat Actor Profile — KILLSEC Aliases & Operations: KILLSEC (also tracked as Kill Security) operates as a aggressive Ransomware-as-a-Servic...
PLAY Ransomware Campaign: US & Spain Hospitality/Retail Hit — Detection Rules for ScreenConnect & Check Point Exploits
Threat Actor Profile — PLAY Aliases: Play, Crypt (historical association) Operational Model: PLAY operates as a closed-group Ransomware-as-a...
AKIRA Ransomware: Critical VPN & RMM Exploitation Alert — 4 New Victims
AKIRA Ransomware: Critical VPN & RMM Exploitation Alert — 4 New Victims Threat Actor Profile — AKIRA Aliases: None confirmed (acts primarily...