A Pressing Matter Part I – The Simplification of Ransomware Crime Development Through Cybercriminal Forums
Introduction “The printed page is obsolete, information isn’t bound up anymore. It’s an entity. The only reality is virtual….
Weaving Chaos – Scattered Spider’s Cyberattacks Spin a Dangerous Web Across the Insurance Industry
Introduction In Q2 2025, Scattered Spider has been noted as a prolific threat actor targeting several sectors across
A DLS EMERGEncy! – Record breaking extortion group DLS emergence in 2025
Introduction As the threat landscape continues to develop, ransomware and data broker groups constantly emerge, develop, and disband.
A DLS EMERGEncy! – Record breaking extortion group DLS emergence in 2025 Read More »
RU against the Machine: The failures of machine translation for analysing Russian-language forums
Introduction Russian slang such as ‘fenya’ and ‘mat’ and cybercriminal-specific dialect is used throughout hidden services, especially on forums.
From Initial Access to Ransomware Attack: An Analysis of Timelines from IAB Listings on Cybercriminal Forums to Extortion Attacks
Introduction Cyjax monitors and analyses the initial access broker (IAB) market on the most prominent cybercriminal forums. As noted in
Is that Ra? Nope, it is RaaS – DLS emerges for New Extortion Group Anubis
Introduction In 2024, Cyjax observed the emergence of 72 extortion and ransomware group data-leak sites (DLSs). As of
Is that Ra? Nope, it is RaaS – DLS emerges for New Extortion Group Anubis Read More »
Stealer Malware and Stealer Logs Explained
Stealer logs and the infostealers that harvest them form a key part of the threat landscape and cybercriminal
Stealer Malware and Stealer Logs Explained Read More »
Take Me Down to Funksec Town: Funksec Ransomware DLS Emergence
Take Me Down to Funksec Town: Funksec Ransomware DLS Emergence Cyjax has continued to observe the emergence of
Take Me Down to Funksec Town: Funksec Ransomware DLS Emergence Read More »
ContFRaversy in Ransomland: Tor-based site emerges for new French-speaking RaaS operation “ContFR”
Following the emergence of data-leak sites (DLSs) for extortion groups Kairos, Chort, and Termite, Cyjax has observed the