SiteCountry Blog

Sign in Subscribe

Ransomware

Network operations center monitoring perimeter firewall appliances and patch dashboards during a ransomware response.

Gunra Ransomware Targeting Critical Infrastructure: What Website and Hosting Operators Should Know

US federal agencies warn that Gunra ransomware affiliates are exploiting Fortinet vulnerabilities to break into critical infrastructure networks, steal data, and encrypt systems.

Network operations center monitoring Fortinet appliances and industrial control dashboards during a ransomware incident

Gunra Ransomware Targeting Fortinet and Schneider Electric Edge Devices

A joint South Korean and U.S. advisory warns that Gunra ransomware operators are chaining Fortinet and Schneider Electric vulnerabilities to breach critical infrastructure networks worldwide.

Server room with glowing racks and a monitor displaying a ransomware lock notification

Ransom Cartel Creator Sentenced to 16 Years: What Website Owners Should Learn

A federal judge has sentenced the creator of the Ransom Cartel ransomware-as-a-service operation to 16 years in prison, underscoring the real-world consequences of running extortion schemes that targeted companies across multiple U.S. states and abroad.

Server room with a VPN appliance showing amber warning lights during a security incident.

INC Ransomware Targets SonicWall SMA 1000: What Website Owners Should Know

INC Ransomware has become the dominant actor exploiting newly disclosed flaws in SonicWall SMA 1000 VPN appliances, with victims listed on its leak site since early August 2026.

Technician reviewing a ransomware incident response checklist on a laptop inside a server room with rack lights.

Ransomware Payment Trends Q2 2026: What the Coveware by Veeam Report Reveals

The Coveware by Veeam Q2 2026 report shows ransomware payments splitting sharply, with averages climbing while medians fall, reflecting a wider gap between mass-extortion incidents and smaller cases.

Editorial illustration of a headless browser window on a monitor with glowing network lines representing hidden

Chaos Ransomware and msaRAT: How Attackers Hide C2 Traffic in Headless Browsers

A new analysis shows the Chaos ransomware group routing command-and-control traffic through headless Chrome and Edge using a Rust implant called msaRAT, raising the bar for defenders.

Editorial illustration of a network firewall protecting internal servers from an external attacker attempting to exploit an

Qilin Ransomware Group Exploits PAN-OS Authentication Bypass for Initial Access

A high-severity PAN-OS authentication bypass flaw was weaponized by Qilin ransomware operators in June 2026, enabling initial access to enterprise environments through vulnerable Palo Alto Networks firewalls.