INC Ransomware Thrives by Mastering the Basics
2026-06-17T20:51:38Z•1658e40b9b6412d64f93dc437b6881dc523a60082d1e94a49e0bfda290d44222
Android-trojanCISA-patchingCVE-2025-8088Check-PointCopilot-SearchLeakFortinetHTTP/2-DoSIvantiMiasmaNPMOraclePyPIRokarollaShinyHuntersSprySOCKScredential-harvestingfileless-malwareghost-senderkernel-evasionprompt-injectionransomwarestealersupply-chainzero-day
What happened
Collection of DarkReading stories (Jun 2026) highlighting an uptick in high-impact active exploitation and supply‑chain attacks: large-scale credential harvesting of 30k+ Fortinet devices, multiple zero‑day/rapidly exploited flaws (Ivanti, Check Point VPN, Oracle), and active exploitation of CVE-2025-8088 against Ukrainian targets. Other notable threats include fileless Phantom stealer targeting browser credentials, kernel‑level evasion by SprySOCKS, evolving Android trojans (Rokarolla), HTTP/2 amplification/DoS risks to telcos and healthcare, and continued supply‑chain compromises (Miasma, Py
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- 1658e40b9b6412d64f93dc437b6881dc523a60082d1e94a49e0bfda290d44222
- Enrichment time
- 2026-06-17T20:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.