Ransomware
Nichirei Logistics Reports Recovery as Extortion Group Claims Responsibility for Cyberattack
The Nichirei cold-chain cyberattack closes with recovery and an extortion-group claim — supply-chain continuation this week.
Ransomware
Sysdig Reports JadePuffer Deploys ENCFORGE Ransomware Purpose-Built to Wipe AI Model Files
The first purpose-built AI-model ransomware lands from JadePuffer — a defender review for organizations hosting AI infrastructure this week.
Ransomware
Dark Reading Attributes SonicWall SMA Zero-Day Exploitation to INC Ransomware Operation
INC Ransomware named as the SonicWall SMA zero-day exploiter — defender teams stay in accelerated verification posture this weekend.
Ransomware
Armenia Detains Russian National Aleksandr Ermakov on US REvil Extradition Request; Family Disputes Identity
A cross-border REvil extradition drama - an identity dispute and the Armenian judicial process take center stage this week, with a Russian tourist detained on a US warrant his lawyers say names a different man.
Ransomware
Symantec Documents "Spirals" Ransomware Reportedly Locking Systems in Under 24 Hours
A fast-moving Rust-based ransomware family — defender detection-engineering review this week.
Ransomware
ReliaQuest: “The Gentlemen” Overtakes Qilin as Most Prolific Ransomware Operation
The ransomware leaderboard shifts — The Gentlemen tops the chart in ReliaQuest’s latest tracking, and defender-team pattern-watching continues this week from the analyst’s chair, not the attacker’s.
Ransomware
Coca-Cola Suspends Fairlife US Milk Production Following Ransomware Attack (SEC 8-K Filed)
A ransomware attack halts fairlife's US milk production and lands as a Coca-Cola SEC 8-K filing — food-industry sector-advisory coverage this week.
Policy & Government
US Unseals Indictment Charging Russian “Bulletproof” Web Hosts Over Cyberattacks That Netted $62 Million
A US indictment against Russian bulletproof hosting operators — law-enforcement continuation coverage this week.
Policy & Government
US Treasury Sanctions First VPN Service, Malware Cryptor Seller Over Ransomware Support
A US Treasury sanctions package targeting VPN and cryptor infrastructure that reportedly supports ransomware — regulatory coverage this week.
Cybercrime
Ryuk Suspect Extradited From Ukraine Pleads Guilty to US Ransomware Charges
Another Ryuk-operator plea lands — the ransomware-operator prosecution pattern continues this week.
Cybercrime
Armenian National Karen Vardanyan Pleads Guilty to Ryuk Ransomware Operations
Another individual-conviction milestone against a ransomware operation — law-enforcement coverage this week.
Ransomware
Unit 42 Details “The Gentlemen” Ransomware and the Affiliate Model Driving Its Growth
Another ransomware-affiliate-model profile lands on defenders’ desks — detection-engineering work this week.