M-Ransomware

19
Jul
The ransomware gang that used a training-data BTC address by mistake was actually the AI's mistake- 254

The ransomware gang that used a training-data BTC address by mistake was actually the AI's mistake- 254

July 4, 2026 Researchers at Sysdig have documented what they believe is the first fully autonomous ransomware operation on record:
3 min read
19
Jul
Anubis's real innovation isn't the ransomware — it's making destruction irreversible- 250

Anubis's real innovation isn't the ransomware — it's making destruction irreversible- 250

July 1, 2026 Anubis, a ransomware-as-a-service operation that emerged in late 2024 as a spinoff of the
2 min read
19
Jul
When a ransomware gang gets ransomware'd: what The Gentlemen's leak reveals about the RaaS economy- 232

When a ransomware gang gets ransomware'd: what The Gentlemen's leak reveals about the RaaS economy- 232

May 10, 2026 In early May 2026, one of the most prolific ransomware-as-a-service operations running today discovered
3 min read
19
Jul
WannaCry at nine years: the day a stolen NSA tool became a lesson in negligence- 231

WannaCry at nine years: the day a stolen NSA tool became a lesson in negligence- 231

May 12, 2026 Nine years on, WannaCry remains the starkest illustration of a principle this publication returns to often: the
3 min read
19
Jul
Two years of silence: what South Staffordshire Water's fine reveals about detection failure- 219

Two years of silence: what South Staffordshire Water's fine reveals about detection failure- 219

May 12, 2026 A British water utility serving 1.6 million people harbored the Cl0p ransomware group inside its network
3 min read
19
Jul
Iran's ransomware proxies and the collapse of the line between crime and state power- 217

Iran's ransomware proxies and the collapse of the line between crime and state power- 217

May 17, 2026 Since 2020, a pattern has hardened into doctrine: when Iran wants to pressure an adversary's
3 min read
05
Jul
Proprietary by Design: The Ransomware Ecosystem's Shift Toward Custom Tooling- 207

Proprietary by Design: The Ransomware Ecosystem's Shift Toward Custom Tooling- 207

June 17, 2026 The commodity toolchain is becoming a liability. Rclone gets flagged. Cobalt Strike beacon patterns get detected. The
3 min read
05
Jul
When the Medicine Cannot Ship: West Pharmaceutical's Ransomware and Healthcare's Systemic Exposure- 182

When the Medicine Cannot Ship: West Pharmaceutical's Ransomware and Healthcare's Systemic Exposure- 182

June 15, 2026 West Pharmaceutical Services makes the stoppers, seals, and delivery systems that go into injectable medicine. It sits
2 min read
05
Jul
The Invisible Guest: How QEMU Became a Ransomware Delivery Vehicle- 179

The Invisible Guest: How QEMU Became a Ransomware Delivery Vehicle- 179

June 10, 2026 Ransomware operators have found a hiding place inside one of the most ordinary tools in the enterprise
2 min read
05
Jul
Inside the Machine: What The Gentlemen Ransomware Leak Reveals- 177

Inside the Machine: What The Gentlemen Ransomware Leak Reveals- 177

May 30, 2026 Ransomware groups rarely find themselves on the receiving end of their own methodology. In early May 2026,
3 min read