Neowin News Feed for: Ransomware

[Free] Ransomware Protection Playbook (worth $28)

Sponsored — Fri, 17 Apr 2026 17:00:01 +0000

Colonial Pipeline. CWT Global. Brenntag. Travelex. The list of ransomware victims is long, distinguished, and sophisticated. And it's growing longer every day. Read more...

Google Drive for desktop now scans uploads for ransomware

Ivan Jenic — Mon, 30 Mar 2026 20:46:01 +0000

Google is making uploading files to Google Drive through the desktop client safer with new security features. Read more...

Unofficial Windows reinstaller app locks you out of your Windows 11 PC until you pay

Sayan Sen — Wed, 09 Jul 2025 09:42:01 +0000

Users need to be aware of an unofficial Windows reinstallation app that does not let the victims use their PC unless they pay. Read more...

INC Ransom claims cyber-attack on Alder Hey Children's Hospital

David Uzondu — Fri, 29 Nov 2024 17:12:01 +0000

INC Ransom, the ransomware group, has claimed responsibility for an attack on Alder Hey Hospital, stealing sensitive data like donor reports and addresses. Read more...

"Helldown" ransomware attacks expand to Linux and VMware

David Uzondu — Tue, 19 Nov 2024 18:30:01 +0000

The Helldown ransomware has evolved, now hitting virtual machines in VMware and Linux environments, raising alarms for cybersecurity teams. Read more...

Microsoft warns of 600M daily cyberattacks with rising AI sophistication

Paul Hill — Wed, 16 Oct 2024 06:38:01 +0000

Microsoft reveals a staggering 600 million cyberattacks daily, with both cybercriminals and nation-states increasingly utilizing generative AI to enhance their operations. Read more...

Comcast warns over 237,000 customers of ransomware data breach

Omer Dursun — Mon, 07 Oct 2024 17:30:01 +0000

Comcast has notified more than 237,000 customers that their personal information was compromised in a ransomware attack on a former debt collection agency. Read more...

Teenager nabbed in the UK in connection with ransomware attacks against US firms

Paul Hill — Sat, 20 Jul 2024 11:48:01 +0000

The West Midlands Police, in cooperation with the NCA and FBI, have arrested a 17-year-old boy in Walsall, UK, on suspicion of participating in ransomware attacks against US-based companies. Read more...

Microsoft launches a new program to help protect rural US hospitals from cyberattacks

John Callaham — Mon, 10 Jun 2024 09:06:02 +0000

Microsoft has just announced a new Cybersecurity Program for Rural Hospitals in the US. It will offer both free and low-cost programs to these hospitals to help them fight cyberattacks and ransomware. Read more...

Game over: Global sting takes down LockBit cybercriminals

Paul Hill — Tue, 20 Feb 2024 15:40:01 +0000

An international task force has nabbed two actors involved with the LockBit ransomware that has been causing a major headache for companies around the world since 2019. Infrastructure was seized too. Read more...

Ransomware attackers threaten to send SWAT teams to patients of hacked hospitals

Martin Hodás — Sun, 07 Jan 2024 17:28:01 +0000

Losing patients' medical records due to a ransomware attack is a nightmare for hospitals. But the pressure to pay the ransom is even higher when hackers threaten to attack the patients too. Read more...

1.67 TB Insomniac Games files are reportedly leaked online by ransomware group

John Callaham — Tue, 19 Dec 2023 10:52:01 +0000

A ransomware group has reportedly leaked over 1.3 million files online that it says was obtained from a cyberattack on Spider-Man 2 developer Insomniac Games, of which includes personal data. Read more...

How to Prevent Ransomware Attacks — Free Best Practices

Sponsored — Wed, 01 Nov 2023 16:00:01 +0000

Ransomware can wreak havoc on a business, actively encrypting system data and demanding direct payment and untraceable cyber currency. Read more...

Malwarebytes Anti-Exploit 1.13.1.568 Beta

Razvan Serea — Fri, 27 Oct 2023 17:06:01 +0000

Malwarebytes Anti-Exploit protects against all known and unknown 0-day vulnerability exploits, protecting users where traditional antivirus and security products fail. Read more...

Microsoft warns about a new malware threat that's being distributed via Teams chats

John Callaham — Wed, 13 Sep 2023 14:14:01 +0000

Microsoft has revealed that a threat actor labeled Storm-0324 is distributing malware by using "phishing lures through Microsoft Teams chats" that could be used to launch ransomware attacks. Read more...

Report: The Cybersecurity Dive Outlook on 2023

Sponsored — Fri, 08 Sep 2023 16:00:01 +0000

Some things are certain in cybersecurity: Ransomware attacks will occur; expert jobs will remain vacant; and CVEs will go unpatched. Take a look at expectations from the sector in 2023. Read more...

Beware! Big Head ransomware that looks like Windows update can also delete backups

Sayan Sen — Mon, 10 Jul 2023 09:06:02 +0000

Security researchers discovered that a new ransomware campaign, dubbed Big Head, is infecting devices by fooling users into thinking it is a critical Windows update, and it can even delete backups. Read more...

US puts $10 million bounty on Russian hacker's head

Paul Hill — Wed, 17 May 2023 00:56:01 +0000

The US Department of the Treasury has sanctioned a prolific ransomware actor, Mikhail Matveev. The Department of State will also offer a $10 million reward for info that leads to his arrest. Read more...

Google found ransomware bypassing Microsoft's SmartScreen that was fixed for Patch Tuesday

John Callaham — Tue, 14 Mar 2023 20:20:01 +0000

Google says hackers were delivering the Magniber ransomware by using a flaw in Microsoft's SmartScreen feature. Google informed Microsoft of the issue which was fixed in today's Patch Tuesday release. Read more...

Los Angeles housing authority discloses data breach after it suffers ransomware attack

Justin Luna — Tue, 14 Mar 2023 04:20:01 +0000

The Housing Authority of the City of Los Angeles recently announced that it suffered a data breach due to a ransomware attack. The incident gave hackers access to members' sensitive information. Read more...

Windows-based ransomware now infects Linux devices as well

Justin Luna — Fri, 10 Mar 2023 15:22:01 +0000

A ransomware variant commonly known to target Windows PCs has recently been found infecting Linux computers as well. The variant does this by exploiting a flaw in IBM's Aspera Faspex software. Read more...

U.S. Marshals Service hit by major security breach compromising sensitive information

Karthik Mudaliar — Tue, 28 Feb 2023 18:44:01 +0000

The United States Marshals Services has suffered a major security breach that compromised the department's sensitive law enforcement information followed by a ransomware attack. Read more...

Fruits and vegetables company Dole suffers ransomware attack

Justin Luna — Fri, 24 Feb 2023 03:36:01 +0000

Fruits and vegetables company Dole recently suffered a ransomware attack that forced it to shut down its production plants. The company is working with experts to remediate the issue. Read more...

'HardBit' ransomware asks victims to provide insurance details to identify ransom demand

Justin Luna — Tue, 21 Feb 2023 04:06:01 +0000

The threat actors behind a ransomware strain called "HardBit" were recently seen asking victims to provide them with their insurance details. This is so they can tailor their demand within the policy. Read more...

New ESXiArgs ransomware variant can evade CISA's recovery script

Justin Luna — Thu, 16 Feb 2023 05:42:02 +0000

The cybercriminals behind the ESXiArgs ransomware have created a new variant that evades the recovery script that the U.S. CISA recently released. The new version also comes with a new ransom note. Read more...

CISA releases recovery script for massive worldwide VMware ESXiArgs ransomware attacks

Sayan Sen — Wed, 08 Feb 2023 06:18:01 +0000

CISA has released a data recovery script dubbed "ESXiArgs-Recover" in order to help users who have been affected by the massive worldwide ESXiArgs ransomware server attacks on VMWare's vSphere. Read more...

New ransomware attack hits thousands of servers worldwide

John Callaham — Mon, 06 Feb 2023 13:40:01 +0000

The ransomware attack was first reported by Italy's National Cybersecurity Agency, but it has affected many other servers in other European countries, along with the US and Canada. Read more...

New ransomware strain exploits Windows search tool Everything

Justin Luna — Fri, 27 Jan 2023 03:44:01 +0000

A ransomware strain that exploits a legitimate Windows search tool has recently been discovered by security researchers. The new variant can disable Windows Defender and even prevent shutdowns. Read more...

Ransomware Protection Tips - Free Article

Sponsored — Wed, 04 Jan 2023 15:00:01 +0000

One of the best ways to recover from such a malicious attack is to ensure you keep good and recent backups of your systems. This is where Undelete instant file recovery software can help. Read more...

5 Simple cybersecurity tips you can practice in 2023

Justin Luna — Tue, 03 Jan 2023 09:44:01 +0000

As we enter a new year, cybercriminals will develop more dangerous and sophisticated cyberthreats. Thankfully, there are many things you can do to mitigate the risk of falling victim to them. Read more...

New 'Azov' ransomware strain frames cybersecurity researchers

Justin Luna — Mon, 31 Oct 2022 06:50:01 +0000

A newly discovered ransomware strain is framing cybersecurity experts by claiming that they are the ones behind the attacks. However, the people blamed are not associated in any way with the malware. Read more...

Top Four Steps to Reduce Ransomware Risks — White Paper

Sponsored — Thu, 06 Oct 2022 16:57:17 +0000

Ransomware is no longer a question of if, but when. Read more for tips on prevention and how best to respond to a ransomware attack. Get ahead of threats with actionable tip in this White Paper. Read more...

Avast launches Ransomware Shield to fight growing threats to businesses

Paul Hill — Wed, 24 Aug 2022 09:10:02 +0000

Avast has launched the Ransomware Shield for business users. It protects files and folders from being edited by unauthorized programs, which should protect them from ransomware programs. Read more...

Beware: LockBit actors using Microsoft Defender to infect PCs with Cobalt Strike beacon

Sayan Sen — Fri, 29 Jul 2022 21:50:01 +0000

Security researchers have found that a utility inside Microsoft's own Defender anti-virus is being abused by LockBit ransomware threat actors to deliver malicious payload to victim systems. Read more...

Microsoft will soon start blocking Office macros once again

Taras Buria — Thu, 21 Jul 2022 09:54:01 +0000

Microsoft is soon ready to start blocking Office macros once again. The company has updated its support documentation with clear explanations and step-by-step instructions for users and IT admins. Read more...

Microsoft Defender seriously impresses in AV-TEST's ransomware protection test

Sayan Sen — Mon, 04 Jul 2022 17:16:01 +0000

Anti-virus assessment firm AV-TEST recently released its advanced threat protection test against ransomware. In this assessment report, Microsoft's Defender has performed exceptionally well. Read more...

Securing Against Ransomware — Free Download

Sponsored — Mon, 27 Jun 2022 14:00:01 +0000

As risks in the cyberspace escalate, CISOs are rethinking what goes into ransomware preparation and response, and expectations for managing the ever-increasing risk. Learn how, in this free report. Read more...

QNAP users are in trouble as ech0raix attacks again

Anushe Fawaz — Mon, 20 Jun 2022 18:40:01 +0000

QNAP remains silent while ech0raix, a ransomware operator targets its devices once again. QNAP NAS devices had been attacked earlier this year, in 2021, and in 2020. Users must remain cautious. Read more...

Beware: Windows 11 update KB5014019 breaks Trend Micro ransomware protection

Sayan Sen — Fri, 27 May 2022 08:24:01 +0000

Trend Micro has cautioned that the recent Windows 11 optional update KB5014019 is leading to issues on its products. The update is breaking the UMH which is responsible for ransomware protection. Read more...

This ransomware forces victims to do acts of goodwill to get their files back

Usama Jawad — Wed, 25 May 2022 08:30:01 +0000

A unique ransomware called GoodWill forces victims to do acts of kindness like feed and clothe the less fortunate in order to decrypt their files. Victims also have to post evidence on social media. Read more...