Data Extortion

MOVEit Transfer Zero-Day: Cl0p’s Memorial Day Heist

Post author:Prabhu Kalyan Samal
Post published: September 5, 2026
Post category:Security Supply Chain Security Web & API Security

CVE-2023-34362 in MOVEit Transfer let Cl0p deploy the LEMURLOOT web shell at scale over Memorial Day weekend — pure data extortion, no encryption, hundreds of downstream victims.

CD Projekt Red Ransomware: The Source-Code Auction That Failed

Post author:Prabhu Kalyan Samal
Post published: September 3, 2026
Post category:Ransomware & Malware Security

HelloKitty ransomware encrypted CDPR’s network and stole Cyberpunk 2077 and Witcher 3 source code — then auctioned it on a crime forum after the studio refused to pay. The incident file on IP extortion, auction economics, and the no-ransom playbook.

Ransomware Evolution 2016-2026: What Defenders Keep Missing

Post author:Prabhu Kalyan Samal
Post published: August 22, 2026
Post category:Ransomware & Malware Security

A decade analysis of ransomware evolution from 2016 to 2026, covering RaaS operations, double extortion, initial access brokers, living off the land techniques, and what defenders keep missing.