Dark Reading

Flaw in Hacktivist Ransomware Lets Victims Decrypt Own Files

A ransomware variant favored by a pro-Russia hacktivist group is back on the scene with a new version that has a fatal flaw — it keeps artifacts that allow victims to decrypt their files. VolkLocker ...
Bleeping Computer

Hackers now use Velociraptor DFIR tool in ransomware attacks

Threat actors have started to use the Velociraptor digital forensics and incident response (DFIR) tool in attacks that deploy LockBit and Babuk ransomware. Cisco Talos researchers assess with medium ...
Dark Reading

Chinese Hackers Use Velociraptor IR Tool in Ransomware Attacks

A China-based threat group known as Storm-2603 has added a new weapon to its hacking arsenal. Cisco Talos researchers observed Storm-2603 abusing Velociraptor, an open source digital forensics and ...
Hosted on MSN

Ransomware accidentally destroys all files larger than 128KB, preventing decryption

VECT, a ransomware-as-a-service (RaaS) that first started circulating online in December 2025, was discovered to host a major bug in its programming. According to Check Point Research (CPR), the ...