Malware & Ransomware coverage from DataSafe Radar holds 21 articles, 15 of them reference guides. The newest was published on October 19, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include MITRE ATT&CK and No More Ransom.
Researchers confirm NSO Group’s spyware infected devices of prominent Serbian critics, marking the second known case this year as parliamentary votes approach.
Researchers found a shared backend called ROMULUS that lets criminals reuse ClickFix tricks to install various malware on victim computers.
Rapid7 researchers won a major cybersecurity award for uncovering stealthy sleeper cells embedded deep inside global telecommunications infrastructure.
Attackers used a memory-only implant to hijack FortiGate processes after stealing credentials from a breached FortiManager, exposing over 500 firewalls.
Citizen Lab researchers found that mercenary spyware is silently installing on devices through digital advertisements, requiring no user interaction to compromise phones.
Hidden access points often survive system wipes because they reside in firmware or bootloaders, making standard antivirus scans ineffective against persistent threats.
Defender analyzes file behavior in memory before execution, catching threats that static signature scans miss by observing what the code attempts to do rather than just what it looks like.
Screen locker ransomware blocks your desktop access entirely, forcing you to pay for a simple unlock code that you can often bypass with basic system tools.
Most document attacks succeed because users enable interactive content before verifying the file source, allowing hidden macros to execute before any security scan completes.
Ransomware fails when it cannot find writable files or execute code, so you stop it by removing permissions and isolating backups rather than relying on signature detection alone.
A zero day virus exploits a hidden flaw before vendors issue a patch, leaving signature-based tools blind until the vulnerability is publicly known and fixed.
Fileless malware hides in system memory and legitimate scripts, bypassing traditional file-based security checks that look for malicious downloads on disk.
Adware often hides inside legitimate software bundles, meaning deleting the visible app leaves the tracking components and browser redirects intact on your system.
Most organizations confuse how fast they can restart with how much data they can afford to lose, leading to backups that run too slowly or restore too slowly.
Real-time protection often blocks nothing because silent exclusions and delayed updates create blind spots that malware exploits before the engine wakes up.
Legitimate programs can load malicious code from the same folder without checking digital signatures or verifying the source origin.
Most small business breaches begin with a physical drive, not an email, because standard antivirus often ignores removable media until it is too late.
Recovery point objective defines how much recent work you accept losing when a system fails, turning backup frequency into a financial calculation rather than a technical one.
Obfuscation transforms readable code into chaotic noise, allowing malicious programs to bypass signature-based detection while retaining their harmful functionality.
Firmware malware survives disk wipes and OS reinstalls because it runs before the operating system loads, making standard security tools blind to its presence.
Malware creators are using new techniques to bypass automated security tools that rely on artificial intelligence for detection.