◈ Encrygma — AI Cyber Security Intelligence. Defensive research only. No exploit code or attack instructions. All analysis based on public reporting & OSINT. ◈
23 articles tagged with #cybercrime
The emerging 'Audit Team' ransomware group has intensified its operations, recording a spike in victim claims in early October 2026. The group continues to leverage double-extortion tactics to pressure organizations.
The newly identified ransomware group 'N0n' has claimed its second victim as of October 5, 2026. This activity follows the group's emergence in late September, signaling a rapid expansion in operations.
Recent intelligence confirms a surge in ransomware activity as groups like ThreeAM and Morpheus target healthcare and industrial sectors, utilizing aggressive double-extortion tactics to pressure victims.
New intelligence confirms ThreeAM and Morpheus ransomware groups have targeted critical healthcare and industrial sectors in Colombia and Taiwan, utilizing aggressive double-extortion tactics.
Ransomware attacks reached a record high in August 2026, with over 1,000 organizations impacted globally. This 12% increase highlights the escalating threat posed by evolving extortion tactics.
Recent intelligence confirms a surge in double-extortion attacks by Chaos and M3rx, targeting US-based healthcare and legal entities. These groups are leveraging stolen data to force rapid ransom payments.
The emerging Krybit ransomware group has intensified its operations, successfully breaching and leaking data from an Indian construction firm. This incident highlights a growing trend of sector-specific targeting.
A new ransomware operation dubbed Galago has surfaced, showing operational ties to the established Panzer extortion group. Security researchers are monitoring the group's dark leak site as it begins targeting organizations globally.
Global ransomware incidents hit record highs in late September 2026, with groups like Emperador and SafePay aggressively targeting critical infrastructure and financial services using double-extortion tactics.
Ransomware activity has reached record highs in late 2026, with new campaigns by Emperador and SafePay targeting critical sectors. Over 1,000 organizations were impacted in August alone.
Emerging threat actor Panzer has rapidly expanded its operations in September 2026, targeting international organizations across multiple sectors. The group utilizes custom encryption and a dedicated leak site.
The MedusaLocker ransomware group has claimed responsibility for a recent breach of the Bulgarian organization Abv, resulting in the exfiltration of hundreds of sensitive emails.
New intelligence reveals a record-breaking month for ransomware, with 1,073 organizations hit in August 2026. Meanwhile, inter-group warfare between actors like ShinyHunters and Clop is reshaping the landscape.
Global ransomware activity reached record highs in late 2026, with groups like Qilin and ShinyHunters aggressively targeting diverse sectors. Recent incidents include attacks on US and Bulgarian entities.
Recent intelligence confirms a surge in autonomous AI-agent attacks, including the first recorded incident in Spain and the discovery of malware like PhantomRaven, signaling a shift toward AI-driven operations.
The Emperador ransomware group has claimed responsibility for a significant data breach against U.S.-based BAYMER. This incident highlights the ongoing threat of double-extortion tactics in 2026.
The Emperador ransomware group has successfully compromised Czech technology firm SEVENOAKS s.r.o. The attackers are currently threatening to leak 3.3 GB of sensitive exfiltrated data.
Recent intelligence confirms a wave of ransomware activity, with groups like Emperador and TheGentlemen targeting international entities. These attacks highlight a persistent threat to data integrity.
Cybersecurity researchers at Kaspersky have identified a sophisticated new malware strain dubbed MacSync. The threat is actively targeting macOS users to exfiltrate sensitive credentials and cryptocurrency wallets.
The Qilin ransomware group has intensified its global campaign, targeting major entities in France and Malaysia. With over 1,400 victims recorded, the group continues to dominate the threat landscape.
Recent intelligence confirms the Qilin ransomware group remains a dominant threat, with over 1,400 victims recorded since late 2025. The group continues to leverage aggressive double-extortion tactics.
The cybercriminal group 'Toy Ghouls' has intensified its campaign against Russian organizations, utilizing a sophisticated blend of custom backdoors and legacy ransomware code to ensure persistent access.
The aggressive ransomware group 'TheGentlemen' has surged in activity, claiming 475 victims globally. Recent intelligence confirms a targeted attack on AIMS Group LLC in the UAE, highlighting the group's high-frequency extortion model.