Ransomware
Ransomware news
Ransomware attacks, gangs and trends, sourced from victims' own disclosures and government advisories.
Most ransomware crews now steal data before — or instead of — encrypting it, and use leak sites to pressure victims. We report attacks confirmed by the victims themselves, treat gang claims as claims, and track the groups behind them in our threat actor profiles. For how ransomware works and how to limit the damage, read ransomware explained.