ransomware - Tech News from Simmons Systems

Tech News from Simmons Systems

ransomware

A collection of 68 posts

Ransomware Attack on Coca-Cola's Fairlife Halts US Dairy Production

Coca-Cola discloses that a ransomware attack on its Fairlife dairy subsidiary disrupts operations and temporarily suspends production of Fairlife products across the United States. In an SEC Form 8-K filing, the company says it detects unauthorized access to several systems, including those tied to production. Coca-Cola activates its incident response

Former Ransomware Negotiators Sentenced to Prison for BlackCat Attacks

Three former employees of cybersecurity firms DigitalMint and Sygnia receive prison sentences for their roles in BlackCat (ALPHV) ransomware attacks against U.S. companies. Angelo Martino, Kevin Tyler Martin, and Ryan Clifford Goldberg plead guilty to conspiring with the notorious ransomware group, exploiting their insider knowledge to maximize extortion profits.

First AI-Run Ransomware Attack Still Requires Human Direction

Security researchers at Sysdig document the first known case of agentic ransomware, an operation dubbed JadePuffer where an AI agent executes a real-world cyberattack from start to finish. The agent breaks into a vulnerable server, steals credentials, moves through the target's network, encrypts files, and writes its own

Autonomous AI Agent Conducts First Fully Automated Ransomware Attack

Security researchers at Sysdig identify JadePuffer as the first documented ransomware operation conducted entirely by an autonomous AI agent. The large language model-powered threat handles every stage of the attack independently, including reconnaissance, credential theft, lateral movement, privilege escalation, and data encryption. Most alarmingly, the agent adapts to failures in

FortiBleed Credential Theft Campaign Tied to Lynx and INC Ransomware Groups

The FortiBleed credential theft campaign, which compromised more than 73,000 Fortinet devices, is now directly linked to the INC and Lynx ransomware-as-a-service groups. SOCRadar's Threat Research Unit discovers the connection after identifying a Windows server used as part of the FortiBleed infrastructure that contains access to ransomware

Global Operation Disrupts Major Cybercrime Tools Amadey and StealC

International authorities and major technology companies are disrupting a cybercrime "assembly line" that allows criminals to collect millions of login credentials and steal over $47 million through ransom payments and fraud. The coordinated effort, known as Operation Endgame, simultaneously targets two widely used malicious platforms that play critical

scattered spider

Scattered Spider Hackers Plead Guilty on First Day of UK Trial

Two members of the notorious cybercrime group Scattered Spider plead guilty in a UK court on the first day of their trial. Thalha Jubair, 20, and 18-year-old Owen Flowers admit to conspiring to hack Transport for London, the agency responsible for the capital's public transit network. Their pleas

AI and Machine Learning Become Essential Weapons Against Rising Cyberattacks

As cyberattacks grow faster and more complex, organizations increasingly rely on artificial intelligence and machine learning to detect threats and lure hackers into simulated environments.

New HermeticWiper Malware Destroys Data Across Ukraine Networks

A destructive data-wiping malware called HermeticWiper is currently compromising hundreds of computers in Ukraine. The attackers use ransomware as a decoy to distract victims while the malware permanently destroys their data.

JBS Pays $11 Million Bitcoin Ransom to Resolve Cyberattack

Meat processing giant JBS hands over $11 million in bitcoin to hackers following a Memorial Day weekend ransomware attack. The company states the payment prevents potential risks for its customers and ensures no data is exfiltrated.

Clop Ransomware Gang Exploits Cleo Software Bug to Breach 66 Companies

The prolific Clop ransomware gang claims to have stolen data from at least 66 organizations by exploiting a vulnerability in Cleo Software's file transfer tools. The hackers plan to publish the victims' names soon to extort ransom payments.

Trump Faces Record Ransomwave Threat as Cybersecurity Policy Shifts

President-elect Donald Trump inherits a record-breaking ransomware crisis despite recent U.S. government disruptions against major cybercriminal networks. Industry leaders expect significant changes in cybersecurity policy as attacks continue to rise regardless of political leadership.

port of seattle

Port of Seattle Confirms Rhysida Ransomware Behind Late August Cyberattack

The Port of Seattle confirms that the Rhysida ransomware group is responsible for the late August cyberattack that disrupted operations at Seattle-Tacoma International Airport. The Port refuses to pay the ransom and warns that the hackers may leak stolen data on the dark web.

Global Authorities Dismantle Top Cybercrime Networks in 2022

Law enforcement agencies worldwide use unconventional methods to apprehend high-profile cybercriminals and disrupt major illicit operations. Massive crypto seizures and the public doxing of ransomware operators highlight a historic year for digital justice.