New Codefinger ransomware poses high danger to data.Getty Images. Update, Jan. 14, 2025: This story, originally published Jan. 13, now includes analysis from security experts, as the nature of the Amazon threat has fully emerged, on how new plans to make ransomware payments illegal could impact victims of such cybercrimes, plus further mitigation advice. Ransomware is a cybersecurity threat that just won’t go away. Be it from groups such as those behind the ongoing Play attacks, or kingpins such as LockBit returning from the dead the consequences of falling victim to an attack are laid bare in reports exposing the reach of ransomware across 2024

Beware this Cloak ransomware drive-by download threat to WindowsSOPA Images/LightRocket via Getty Images. Although little is known, in truth, about a cybercriminal actor employing what has become known as the Cloak ransomware threat, the group has risen rapidly to gain status as a significant player in the ransomware landscape since first emerging in 2022. Threat researchers at Halcyon have now analyzed the Cloak ransomware threat and uncovered a new and worrying variant that not only displays “sophisticated extraction and privilege escalation mechanisms” but also terminates processes related to both security and data backup tools. This new Cloak variant, Halcyon warned, can spread by way of dangerous drive-by downloads disguised as legitimate updates like Microsoft Windows installers. Here’s what you need to know.ForbesNew Windows 0Day Attack Strikes—Microsoft Warns Millions To Update NowBy Davey Winder. The Dangerous Windows Drive-By Threat That Is Cloak Ransomware