The Arcus Media ransomware, launched in May 2024, targets diverse industries using advanced techniques like privilege escalation, selective encryption with ChaCha20, and backup disruption. It employs double extortion tactics by exfiltrating data and threatening public leaks. To mitigate risks, organizations should maintain offline backups, utilize robust EDR solutions, and educate employees on phishing threats.

Qilin Ransomware Surging Following The Fall of dominant RansomHub RaaS
The ransomware landscape experienced a significant shift in the second quarter of 2025 as Qilin ransomware emerged as the dominant threat following the unexpected collapse