According to Kaspersky Security Network, between October 2024 and July 2025, over 5,000 users — both individuals and ...

Following RansomHub’s mysterious exit, the Threat Response Unit (TRU) at eSentire  identified a new threat actor, dubbed ShadowCoil, believed to be an ex-affiliate of the RansomHub operation.

Initially detected in October 2024, early versions of Efimer were spread through compromised WordPress websites. By June 2025 ...