Ransom & Dark Web Issues Week 3, October 2026

Ransom & Dark Web Issues Week 3, October 2026

ASEC Blog publishes Ransom & Dark Web Issues Week 3, October 2026           n0n Ransomware Attacks on 12 South Korean Port and Logistics Companies Cyberattack Targets Refrigeration Systems at Major French Supermarket Chains Payment and Transaction Data Leak Claimed at a Saudi Fintech Company

September 2026 Dark Web Breach Incident Trend Report

September 2026 Dark Web Breach Incident Trend Report

Note The September 2026 Dark Web Breach Incident Trend Report focuses on data breach cases and the sale of initial access credentials posted on the deep web and dark web forums. The report explicitly states that the accuracy of some of its content cannot be fully verified due to the

September 2026 Dark Web Threat Actor Trend Report

September 2026 Dark Web Threat Actor Trend Report

Note The September 2026 Dark Web Threat Actor Trend Report focuses on threat actors active on the deep web and dark web, as well as publicly reported cyberattack incidents. It is noted that the factual accuracy of some content cannot be independently verified. Major Issues Some hacktivist groups claimed responsibility

Ransom & Dark Web Issues Week 2, October 2026

Ransom & Dark Web Issues Week 2, October 2026

ASEC Blog publishes Ransom & Dark Web Issues Week 2, October 2026           International Operation Seizes KillSec Ransomware Infrastructure and Arrests Three Suspects Customer Data of a South Korean Health and Beauty Retailer Offered for Sale Saudi Intelligence Agency Personnel and Organizational Data Allegedly Leaked

Ransom & Dark Web Issues Week 1, October 2026

Ransom & Dark Web Issues Week 1, October 2026

ASEC Blog publishes Ransom & Dark Web Issues Week 1, October 2026           Dutch Police Confirm Arrest of 24-Year-Old Man in ShinyHunters Hacking Investigation [1] [2]  Ulose Claims Data Leak from a South Korean General Hospital Qilin Ransomware Attack on a Japanese Freight and Logistics Company

From Endpoint to Funhouse: Evolution of Ransomware Families and Kimsuky-Linked Distribution Cases

From Endpoint to Funhouse: Evolution of Ransomware Families and Kimsuky-Linked Distribution Cases

1. Overview  AhnLab SEcurity intelligence Center (ASEC) recently identified a case in which the Kimsuky group ultimately distributed the Funhouse ransomware via a malicious Hangul document that was disguised as a resume. The Funhouse ransomware was identified as a variant of previously disclosed endpoint ransomware, and the tools used in

Ransom & Dark Web Issues Week 4, September 2026

Ransom & Dark Web Issues Week 4, September 2026

ASEC Blog publishes Ransom & Dark Web Issues Week 4, September 2026           Metaencryptor Ransomware Attack on a South Korean Camera Module and Equipment Manufacturer Metaencryptor Ransomware Attack on a Japanese Automotive Parts Manufacturer ShinyHunters Claims Breach of a U.S. Federal Law Enforcement Agency and Theft

August 2026 Threat Trend Report on Ransomware

August 2026 Threat Trend Report on Ransomware

Purpose and Scope This report summarizes statistics on new ransomware samples, affected systems, and statistics on targeted businesses collected during the month of August 2026, as well as major Korean & Global ransomware issues. Statistics on targeted businesses were compiled based on the time when publicly available information from ransomware

Ransom & Dark Web Issues Week 3, September 2026

Ransom & Dark Web Issues Week 3, September 2026

ASEC Blog publishes Ransom & Dark Web Issues Week 3, September 2026           Internal Data of a Japanese Pharmaceutical and Healthcare Company Offered for Sale Following a Cyber Incident Customer Data of a South Korean E-Commerce and Retail Company Offered for Sale AUDIT TEAM Ransomware Attacks

Private HTS programs that spread ransomware

Private HTS programs that spread ransomware

AhnLab SEcurity intelligence Center (ASEC) recently identified a case in which ransomware was distributed through a private home trading system (HTS). The HTS program used to distribute the ransomware is called “UBP Asset” and has long been exploited in online investment scams. Given that a photo of the same HTS