New ransomware service VanHelsing targets enterprises for profits

forbes.com

A new ransomware threat called VanHelsing has quickly emerged, targeting Windows systems and charging hackers $5,000 to use its attack service. In just two weeks since launching on March 7, VanHelsing has already seen three victims, with ransom demands reaching up to $500,000. Despite earlier reports suggesting a decline in ransomware attacks, recent activity indicates otherwise. The FBI had previously disrupted another major player, LockBit, but that group has returned with renewed threats. This highlights the ongoing and evolving challenge of ransomware for organizations. VanHelsing is notably aggressive. Security researchers reported that they have discovered two different versions of the ransomware, created only days apart. This suggests that the threat is rapidly changing and expanding. The service allows hackers to access tools for their attacks and offers a control panel to manage them. Affiliates can earn 80% of the ransom collected, while the remaining 20% goes to VanHelsing's operators. This business model is appealing for criminals looking to profit from ransomware attacks. While the initial attacks have been on Windows systems, VanHelsing can also target Linux and other platforms, widening its potential impact. Experts believe that Russian cybercriminals may be behind this new threat. As VanHelsing's activity grows, specialists emphasize the importance of strong cybersecurity measures to protect against these sophisticated ransomware attacks. The speed and scale of these developments underline the need for vigilance in the digital landscape.


With a significance score of 4.5, this news ranks in the top 2.8% of today's 26329 analyzed articles.

Get summaries of news with significance over 5.5 (usually ~10 stories per week). Read by 10,000+ subscribers: