RaaS
The Gentlemen is Making Its Mark in the Ransomware World
The Gentlemen RaaS group emerged onto the scene a year ago and in that time has racked up affiliates and victims at an alarming rate, becoming the second most active ransomware group ...
Emulating the Concealed Sinobi Ransomware
AttackIQ has released a new attack graph that emulates the behaviors of Sinobi ransomware, a ransomware strain that has been active since mid 2025. Sinobi is suspected to be a rebrand of ...
Emulating the Systematic LokiLocker Ransomware
AttackIQ has released a new attack graph that emulates the behaviors of LokiLocker ransomware, a .NET based strain active since at least mid-August 2021. The malware combines defense evasion and impact techniques, ...
Emulating the Mutative BlackByte Ransomware
AttackIQ has released a new attack graph that emulates the behaviors exhibited by BlackByte ransomware, a strain operated under the Ransomware-as-a-Service (RaaS) model that emerged in July 2021. Since its emergence, BlackByte ...
A Week in Cyber Threats: Emerging Attack Campaigns and Adversary Activity Across the Globe
Executive Overview The global cyber threat landscape continues to evolve at speed, with adversaries ranging from nation-state espionage groups to financially motivated ransomware operators and cybercriminal collectives. Over the past seven days, ...
Three Factors Determine Whether a Ransomware Group is SuccessfulÂ
ReliaQuest’s Threat Spotlight: How Automation, Customization, and Tooling Signal Next Ransomware exposes how elite Ransomware-as-a-Service (RaaS) groups thrive. Automation, advanced tools, and attack customization attract top affiliates and drive faster, more effective ...
Emulating the Prominent Global Group Ransomware
AttackIQ has released a new attack graph that emulates the behaviors exhibited by Global Group ransomware, a threat that first appeared in June 2025 and quickly became notorious across the security landscape ...
Emulating the Expedited Warlock Ransomware
AttackIQ has released a new attack graph that emulates the behaviors exhibited by Warlock ransomware, which emerged in June 2025. Beginning in July, Warlock operators have primarily targeted internet-exposed, unpatched on-premises Microsoft ...
Emulating the Terrorizing VanHelsing Ransomware
AttackIQ has released a new attack graph emulating the behaviors exhibited by VanHelsing ransomware, a new and rapidly growing ransomware-as-a-service (RaaS) affiliate program that emerged in March 2025. This emulation enables defenders ...
Medusa Ransomware: Inside the 2025 Resurgence of One of the Internet’s Most Aggressive ThreatsÂ
Medusa: Its operations, the main factor driving its recent resurgence, which has led to warnings issued by global authorities, its targets and why it’s so dangerous ...
