ransomware gangs

CISA confirmed that ransomware gangs are exploiting a Microsoft Defender privilege escalation vulnerability named BlueHammer, which was previously used in zero-day attacks. The flaw allows attackers to escalate privileges, potentially leading to system compromises.

Europol has disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs and cybercriminal networks. The service is estimated to have laundered over €336 million (~$389 million) in illicit profits.

Law enforcement, led by Europol, has shut down a VPN service that was used by approximately two dozen ransomware gangs to conduct cyberattacks while maintaining anonymity. Despite the service's promise of complete anonymity for users, Europol successfully identified the VPN users and notified them of their identification.