Category
Ransomware
191 articles
Anubis Ransomware: Operational Profile, Attack Chain, and Response Priorities
Anubis ransomware analysis explaining wipe capability, extortion tactics, encryption methods, and practical detection and response strategies.
Qilin ransomware: Attack Chain, MITRE ATT&CK TTPs, and Incident Response Guide
Qilin ransomware (also known as Agenda): RaaS model, MITRE ATT&CK TTPs, IOCs, and an incident response guide for security teams. Updated June 2026.
NightSpire Ransomware: How It Works and How to Defend Against It
A deep analysis of the NightSpire ransomware covering tactics, encryption behavior, indicators of compromise, and practical response guidance.
SafePay Ransomware: What It Is, How It Operates, and How to Contain It
Learn how SafePay ransomware works, who it targets, and how to respond. Covers TTPs, indicators of compromise, prevention controls, and recovery guidance.
Gentlemen Ransomware: Tactical Analysis of a High-Velocity RaaS Operation
A detailed overview of Gentlemen ransomware operations, tactics, encryption techniques, and recommended mitigation controls for organizations.
Sinobi Ransomware Explained: Intrusion Methods, Encryption, and Incident Response
Sinobi ransomware explained: attack lifecycle, intrusion methods, data exfiltration, encryption behavior, and incident response guidance.
INC Ransomware: Tactics, Evolution, and Incident Response Guide
INC ransomware overview: tactics, attack phases, indicators, and practical guidance for detection, response, recovery, and prevention.
Dire Wolf Ransomware: Operating Model, Attack Chain, and Defensive Strategies
Dire Wolf ransomware overview: operating model, attack chain, extortion workflow, and defensive strategies for targeted ransomware threats.
DragonForce Ransomware: How the Cartel Model Works and How to Defend Against It
DragonForce ransomware is a white-label extortion cartel with 590+ claimed victims. Full attack chain, IOCs, MITRE mapping, and security checklist.
The Ultimate Guide to Endpoint Detection and Response (EDR)
What are the benefits of endpoint detection and response (EDR) and why is it important? Discover how EDR cyber security works and the various ways endpoint protection prevents ransomware and malware.
The Lazarus Group Threat Profile: An Expert Analysis
Deep threat profile of the Lazarus Group (TraderTraitor): history, TTPs with MITRE mappings, IoCs, and enterprise mitigation guidance.
Famous Ransomware Attacks: What Are the Lessons of the 8 Biggest Attacks in History
Lessons learned from 8 devastating ransomware attacks. Discover attack patterns, financial impacts, and defense strategies to protect your organization.