Skip to content
DarkCore: A Data-Theft RAT With a Session-Hijacking Browser
BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.
The State of Ransomware: September 2026
BlackFog's state of ransomware August 2026 measures publicly disclosed and non-disclosed attacks globally.
Medusa Ransomware: Why Rapid Exploitation and Data Theft Demand a Prevention-First Strategy
threat intelligence brief · medusa ransomware Sector ⟶
Gunra Ransomware: Why Stopping Data Exfiltration Matters Before Encryption Begins
threat intelligence brief · gunra ransomware Sector ⟶
QTFY: Industrializing Cyber Exploitation Against Critical Infrastructure
QTFY: Industrializing Cyber Exploitation Against Critical Infrastructure
The State of Ransomware: August 2026
BlackFog's state of ransomware August 2026 measures publicly disclosed and non-disclosed attacks globally.
WEBINAR: The First Half Of 2026 In Ransomware – Register Now!
Webinar: The first half of 2026 in ransomware - 4,757 Attacks, One Real Story.
The State of Ransomware: July 2026
BlackFog's state of ransomware July 2026 measures publicly disclosed and non-disclosed attacks globally.
2026 Q2 Ransomware Report
BlackFog’s 2026 Q2 Ransomware Report - Beneath The Surface: Why Stable Attack Numbers Hide A Rapidly Escalating Data Theft Crisis
How EDR Killers Work: BYOVD, Kernel Access, And The Pre-Encryption Window
EDR killers now sell as SaaS-style products with dashboards and credit balances. Here's how the market works and what to harden first.
The State of Ransomware: June 2026
BlackFog's state of ransomware June 2026 measures publicly disclosed and non-disclosed attacks globally.
The Canvas Ransomware Attack: How ShinyHunters Exposed a Global Education Security Crisis
ShinyHunters’ Canvas ransomware attack exposed millions of student records, highlighting growing risks of data exfiltration in education.