Ransomware Attacks Rise as Breached User Accounts Become Primary Attack Vector, Report Finds
Use Sophos' victim survey to prioritize account security, MFA coverage, and faster ransomware containment.
Category Ransomware Attacks
Ransomware incidents and attacks
Fake Repositories Masquerade as Popular Software, Secretly Installing Malware on Developer Machines
Spot fake project pages, risky external downloads, and publisher gaps before trojanized software reaches your machine.
Cryptocurrency Wallet Owners Targeted by OkoBot Malware Stealing Private Keys and Funds
Learn how OkoBot's fake seed-phrase pages trick hardware wallet users, and the one rule that stops the theft cold.
Gaming Malware Scam Drains Investors $220K in Cryptocurrency – Federal Probe Expands
How a Steam game malware scheme allegedly drained $220K in crypto — and the practical steps gamers can take to stay safe.
Malware Delivery Hidden Behind Counterfeit CAPTCHA Verification Forms Targeting Web Users
Learn how fake CAPTCHA pages trick you into running malware yourself—and the one warning sign that separates a real check from a trap.
Ransomware Tactics Shift Toward Identity Compromise Over Exploit-Based Attacks Today
Most ransomware now starts with stolen logins, not exploits — here's why MFA alone fell short and what to fix first.
Small Business Cybersecurity Checklist After Latest Credential Attacks
Credentials drive 42% of breaches, and small businesses face automated attacks every 11 seconds. Here's what you must fix now.
Qilin Ransomware Tactics: Windows Directory Replication Abuse Explained
Qilin ransomware operators abuse Windows directory replication to spread malware across enterprise networks disguised as legitimate system traffic.
Crypto Wallet Malware Drains Private Keys Through Fake Apps
Malware-laden fake wallet apps on the Apple App Store stole recovery phrases; similar campaigns target Android, Chrome extensions, and GitHub users with clipboard thieves and trojanized tools.
VPN Operator Sanctions Signal Tougher Ransomware Enforcement
Sanctions are reaching the privacy infrastructure that helps ransomware crews hide, transact, and rebuild after disruption.