Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Kaspersky Security Blog

Check Point Research

CVE Database V5

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

The Hacker News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit NetSec

Reddit InfoSec News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The June 2025 threat analysis reveals an increase in new ransomware samples compared to May. The data is based on detection names from AhnLab and information collected from Dedicated Leak Sites (DLS) of ransomware groups. Statistics cover the past six months, showing the total number of ransomware samples collected. The analysis includes a breakdown of companies affected by ransomware attacks, as posted on DLS. While some data collection may be incomplete or delayed for certain ransomware groups, the report provides insights into the current ransomware landscape. A list of affected companies publicly disclosed by various ransomware groups is also included, along with MD5 hashes of notable samples.

The June 2025 Threat Trend Report on Ransomware highlights a notable increase in new ransomware samples detected compared to the previous month, May 2025. This analysis is based on detection data from AhnLab and intelligence gathered from Dedicated Leak Sites (DLS) operated by ransomware groups. The report covers a six-month period, providing statistics on the total number of ransomware samples collected and a breakdown of companies affected by ransomware attacks as publicly disclosed on these leak sites. Although some data may be incomplete or delayed due to the nature of data collection from multiple ransomware groups, the report offers valuable insights into the evolving ransomware landscape. The report includes MD5 hashes of notable ransomware samples, which can be used for detection and blocking. The ransomware tactics, techniques, and procedures (TTPs) referenced include MITRE ATT&CK techniques such as T1489 (Service Stop), T1567 (Exfiltration Over Web Service), T1566 (Phishing), T1486 (Data Encrypted for Impact), and T1490 (Inhibit System Recovery), indicating that these ransomware campaigns employ a combination of initial access via phishing, data exfiltration, service disruption, encryption of data, and prevention of recovery mechanisms. The report does not specify particular ransomware families or threat actors but emphasizes the rise in ransomware-as-a-service (RaaS) operations and the use of Dedicated Leak Sites to pressure victims. No known exploits in the wild or CVEs are associated with this report, and no specific affected software versions are identified. The severity is assessed as medium, reflecting the ongoing threat posed by ransomware but without indication of novel or critical vulnerabilities exploited.

Detailed information about June 2025 Threat Trend Report on Ransomware. Get real-time updates, technical details, and mitigation strategies.

June 2025 Threat Trend Report on Ransomware - Live Threat Intelligence - Threat Radar | OffSeq.com

June 2025 Threat Trend Report on Ransomware

This analysis presents ransomware statistics for April 2025, including new samples collected, affected systems, and targeted companies. The report shows a relative increase in new ransomware samples compared to March. It provides a six-month overview of collected samples and details on companies affected by various ransomware groups, based on information from dedicated leak sites. The data is collected through the ATIP infrastructure and includes MD5 hashes of some samples. The report aims to give a comprehensive view of the current ransomware landscape, both within Korea and internationally, offering valuable insights into the evolving threats posed by different ransomware groups.

The April 2025 Threat Trend Report on Ransomware provides a detailed statistical analysis of ransomware activity observed during April 2025, highlighting a relative increase in new ransomware samples compared to the previous month. The report aggregates data collected over a six-month period via the ATIP infrastructure, which includes the collection of MD5 hashes for some ransomware samples. It focuses on the evolving ransomware landscape by tracking various ransomware groups and the companies they have targeted, leveraging information from dedicated leak sites where victim data is often published. While the report does not specify particular ransomware variants or vulnerabilities exploited, it offers valuable insights into the volume and diversity of ransomware threats, emphasizing the persistent and growing nature of ransomware attacks globally, including within Korea and internationally. The absence of known exploits in the wild suggests that the report is more focused on trend analysis and sample collection rather than newly discovered zero-day vulnerabilities. The use of dedicated leak sites as a data source underscores the continued tactic of ransomware operators to publicly pressure victims into paying ransoms. Overall, the report serves as a comprehensive resource for understanding ransomware trends, sample proliferation, and victimology, which can inform defensive strategies and threat intelligence efforts.

Detailed information about April 2025 Threat Trend Report on Ransomware. Get real-time updates, technical details, and mitigation strategies.

Title	Severity	Type	Source	Date

Threats Tagged 'md5 hashes'

Stop chasing alerts. Route them.

Filter Threats

Threats Tagged 'md5 hashes'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility