#RaaS
All CosmicBytez Labs articles tagged #RaaS, across news, security advisories, how-to guides, and projects.
- News
Alleged KillSec Ransomware Mastermind a 16-Year-Old
Ten-nation Operation KillSwitch dismantled the KillSec RaaS gang, arresting a 16-year-old alleged administrator and seizing 110TB of stolen data.
- News
New StormEncryptor Ransomware Used by Former Medusa Affiliate
A financially motivated threat actor formerly associated with the Medusa ransomware operation is now deploying a new ransomware strain called...
- News
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
PRODAFT has published detailed analysis of the DevMan ransomware-as-a-service operation, revealing a professional-grade affiliate portal with payload...
- News
How Ransomware Syndicates Weaponize Corporate-Style Organization
From outsourced labor to tiered pricing models, today's top ransomware groups operate less like rogue hackers and more like Fortune 500 companies — with...
- News
Europe Evolves Into Ransomware's Favorite Region
New research from Black Kite shows ransomware attacks against European organizations surged 55% in the first four months of 2026 compared to the same...
- News
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Cybersecurity researchers have charted the evolution of INC ransomware from a nascent RaaS operation to one of the most prolific cybercrime groups in...
- News
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
A new analysis of The Gentlemen ransomware operation reveals the financially motivated group has claimed 478 victims and evolved a worm-like...
- News
Who Runs the Ransomware Group 'The Gentlemen'?
KrebsOnSecurity investigates the identity and structure behind The Gentlemen, the second most active ransomware gang of 2026, known for offering...
- News
Tables Turn on 'The Gentlemen' RaaS Gang With Data Leak
An OPSEC failure provides a rare window into the inner workings of The Gentlemen ransomware-as-a-service group, exposing their affiliate model, TTPs, and...
- News
Phobos Ransomware Admin Pleads Guilty — 1,000+ Victims
Evgenii Ptitsyn, 43, a Russian national who administered the Phobos ransomware-as-a-service operation, pleaded guilty to wire fraud conspiracy in the U.S....
- News
Nova (RALord) Ransomware Group Confirmed Active with 73
The Nova ransomware group, formerly known as RALord, has been confirmed fully operational with 73 victims across nearly every continent, employing double...
- News
The Rise of Ransomware-as-a-Service: 14 Active Platforms
Security researchers identify 14 active RaaS platforms operating sophisticated affiliate programs, with entry costs as low as $40 per month lowering the...