Archive

Insights from the GRIT Q2 2025 Ransomware & Cyber Threat Report

July 10, 2025 Ransomware continues to escalate, driving a more fragmented and aggressive threat landscape.

Tabletop to Real World: Turning Incident Response Exercises into Operational Readiness

May 30, 2025 Tabletop exercises are just the start Running a tabletop or simulated incident is a critical step in building preparedness.

Interlock Intrusion: How Interlock Achieves Encryption

May 8, 2025 Background Organizations often call on GuidePoint Security analysts to support and consult on Digital Forensics and Incident Response (DFIR) efforts, focusing on remediation, recovery, and…

Insights from the GRIT 2025 Q1 Ransomware & Cyber Threat Report

April 10, 2025 Ransomware continues to surge, reshaping the threat landscape.

RansomSnub: RansomHub’s Affiliate Confusion

April 8, 2025 Executive Summary Since RansomHub’s emergence in early 2024, the group has become the most prolific Ransomware-as-a-Service group operating today.

Breaking Basta: Insights from Black Basta’s Leaked Ransomware Chats

March 6, 2025 Key Takeaways During the period covered by the Black Basta leaked chat logs (18 September 2023 – 28 September 2024), we observed the following We observed at least 47 cryptocurrency wa…

Snail Mail Fail: Fake Ransom Note Campaign Preys on Fear

March 4, 2025 In early March 2025, GRIT received reports from multiple organizations regarding suspicious physical letters delivered by mail from US addresses to members of their executive team.

GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies

February 18, 2025 Ransomware threats continue evolving, with the most successful groups refining their tactics to maximize impact over the last year.

GRIT’s 2025 Report: Annual Vulnerability Analysis and Exploitation Trends

February 4, 2025 2024 saw an unprecedented surge in vulnerability disclosures, with over 39,000 vulnerabilities published.

Ongoing report: Babuk2 (Babuk-Bjorka)

January 29, 2025 Editor’s note: We will continue to provide updates as further information is forthcoming.

GRIT’s 2025 Report: Post-Compromise Detection Strategies

January 28, 2025 This blog marks the beginning of a series based on the findings in the GRIT 2025 Ransomware and Cyber Threat Report.

Unveiling the GRIT 2025 Ransomware and Cyber Threat Report

January 16, 2025 The ransomware landscape is shifting, and understanding these changes is critical to staying ahead.