Ransomware gangs regularly add new tactics and twists to their playbooks to increase pressure on victims. The latest development comes from the Ragnar Locker group, who are now threatening to publish sensitive information if the victim even makes contact with authorities.
In mid-July the REvil ransomware group, linked to the Kaseya and JBS incidents among other attacks, appeared to go out of business. It turns out they may have just been taking a refreshing summer break.
Israeli media reported that several Israeli companies and a nonprofit were breached in a new cyber attack wave attributed to an Iranian ransomware gang motivated by Middle Eastern geopolitics.