New
What does your ransomware recovery plan look like after the last round of tests?
Immutable backups, isolated recovery environments, recovery-time testing. What did your last exercise reveal?
Topic
Ransomware and malware
30 stories in the last 90 days · 1 community thread
In short
Ransomware is malicious software that encrypts or steals data and demands payment to restore it or keep it private; this topic covers ransomware, extortion and other malware. Buyers care because recovery depends as much on backups, identity controls and rehearsed response plans as on detection tools.
Written by Techarda editors · Updated · How we work
Latest stories
The newest Ransomware and malware stories from the last 90 days. Each one opens with our summary and a link to the original source.
Security
Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Access
Artificial Intelligence technologies have made a huge impact on the security industry. But as with any public technology, adversaries have access to AI as well. They’re wasting no time incorporating AI into their malicious workflows and ransomware operators have been able to leverage it - unfortunately, this has led to some of their successes.Fortunately, there is plenty of potential for…
Data & Analytics
Closing the Binary Blind Spot: Domain-Knowledge Injection for LLM Malware Triage in npm Packages
Supply chain attacks on package registries have grown in volume and sophistication [1]...
Storage & Data Protection
What Is Backup Storage?
What Is Backup Storage? by Everpure Blog Learn how enterprise backup storage can help protect critical data, support ransomware recovery, meet RTOs, and optimize retention across storage tiers.
AI & ML Platforms
SentinelOne cuts malware analysis from weeks to hours
With OpenAI Daybreak, SentinelOne cuts weeks of malware analysis to hours, creating capacity to investigate more threats.
Security
Election Scams Are Getting Harder to Spot as Real Campaign Outreach and Fraud Converge
In September, viewers of a Pennsylvania TV station received a text telling them to “verify your voter profile.” The station’s investigator could not find out who sent it, and the link was flagged as malware. When Check Point Exposure Management researchers followed the link, it led to a political fundraising page. That small episode sums up the main finding of our report on 2026 US midterm…
Security
How Luna Moth Runs Data Extortion Like a Business
Around October 5, 2026, an anonymous onion site called “The Luna Moth Files” claimed to expose internal material from Silent Ransom Group (SRG), also tracked as Luna Moth and UNC3753. The package includes chat exports, a vishing document, screenshots, and a purported fake employee résumé. Nobody knows who published it or how the archive was obtained, so we treat its claims as unverified unless…
Security
Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware
In July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor backed by the North Korean government that has targeted the cryptocurrency industry for years. This campaign also significantly overlaps with the previously reported KelpDAO incident, the analysis…
DevOps & Platform Engineering
Hijacked TensorLake npm Turned Install Into Credential Risk
TL;DR A malicious release of TensorLake's TypeScript SDK, tensorlake@0.5.144 , used an install hook to search for developer credentials and accept remote commands. Sonatype's code review found that its GitHub fallback could create a public repository and commit collected data, including a stolen GitHub token in one path, and that the malware could modify accessible repositories by committing…
Earlier in the last 90 days
- Q3 2026 Open Source Malware Index: When Compromise CompoundsSonatype · 8 Oct 2026
- Why Your Computer Backup Strategy Determines Whether You Pay the RansomBackblaze · 8 Oct 2026
- Air-Gapped vs Private Network Backup: Which Is More Secure?Megaport · 7 Oct 2026
- The first 72 hours of a ransomware attack: Why restored isn’t recoveredDatadog · 2 Oct 2026
- 2CLoader: A New Malware Loader Delivering Vidar and RemusZscaler · 1 Oct 2026
- Ransomware Leverage is Growing by the Terabyte: Takeaways from ThreatLabz 2026 Ransomware ReportZscaler · 30 Sept 2026
- A fake job interview portal is tricking candidates into installing malwareTrendAI · 30 Sept 2026
- The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI EnvironmentsWiz · 26 Sept 2026
- What IT Teams Get Wrong About Immutable Backups and Object LockBackblaze · 23 Sept 2026
- AI Models Broke Their Own Containment: Key Findings from the July-August 2026 AI Threat LandscapeCheck Point Software · 17 Sept 2026
- What Is Immutable Backup and Why Does It Matter for Ransomware Recovery?Megaport · 14 Sept 2026
- SloppyRAT: A New Tool For Ransomware AttacksZscaler · 11 Sept 2026
- The State of Ransomware in Education 2026Sophos · 27 Aug 2026
- Cohesity Identity Resilience: Purpose-built for Active Directory challengesCohesity · 25 Aug 2026
- When AI Becomes the Lure: A Fake Gemini Installer Delivers VidarDarktrace · 23 Aug 2026
- Fake AI, real malware: Attackers impersonating AI brandsSophos · 19 Aug 2026
- C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2Zscaler · 18 Aug 2026
- Abyssos: Technical Analysis of a New Modular RATZscaler · 11 Aug 2026
- Ransomware Moves up the Org Chart: Managers Are Prime TargetsZscaler · 6 Aug 2026
- Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE HooksSnyk · 4 Aug 2026
- Helpdesk Hijackers: Teams Vishing, Quick Assist, and GoGRPC BackdoorZscaler · 28 July 2026
- Uncovering a Multi-Stage Ransomware Attack Through Behavioral DetectionDarktrace · 26 July 2026
What practitioners are discussing
Stories say what companies announced. These threads are where people who work with Ransomware and malware compare notes.
Companies in these stories
The active companies with the most Ransomware and malware stories in the last 90 days. It counts news coverage, not quality, market share or fit for your needs.
Related categories
Where Ransomware and malware sits among the categories Techarda covers. Each hub shows who is active, and each guide sets out how to evaluate vendors.
Terms to know
Plain definitions of terms that come up in Ransomware and malware stories, from the Techarda glossary.
Frequently asked questions
What is the most useful defence against ransomware?
There is no single one. Backups attackers can’t alter or delete, tested restores, phishing-resistant MFA, prompt patching of internet-facing systems and good endpoint detection together cover the most common routes in.
Should an organisation pay a ransom?
That is a decision for the board with legal advice, and some jurisdictions now require payments to be reported. Paying doesn’t guarantee that data is restored or deleted, so planning never to need to is the stronger position.
What is double extortion?
When attackers both encrypt data and steal a copy, then threaten to publish it unless paid. Good backups alone don’t remove that risk, so watching for large outbound transfers matters too.
Stories are filed under topics automatically from their headline and summary, so the odd one may sit in the wrong place. Spotted one, or a topic we should add? Email engage@techarda.com. All topics.