Ransomware Intelligence
Defensive ransomware monitoring - groups, campaigns, targeted sectors and mitigation guidance. No stolen data or illegal material is ever displayed.
Campaigns & groups reported
Healthcare ransomware waveLockBit operations
Campaign: Healthcare ransomware wave
Akira
CERT NZ reports increased ransomware activity against New Zealand health organisations; encourages offline backups and multi-factor authentication.
CountriesNZ
Sectorshealthcare
MITRET1486T1567
🛡️ Verify offline backups, enable MFA, and segment clinical systems.
NZ NCSC / CERT NZ — Advisories · 2026-08-16 · source ↗
Campaign: LockBit operations
LockBit
Europol warns of continued LockBit 3.0 affiliate activity against manufacturing and logistics across the EU.
CountriesEUUKDEFR
Sectorsmanufacturingtransportretail
MITRET1486
🛡️ Harden internet-facing services and maintain tested offline backups.
Europol / EC3 · 2026-08-15 · source ↗
Ransomware readiness
- Maintain tested, offline backups with a documented restore procedure.
- Enable multi-factor authentication everywhere, especially for privileged accounts.
- Patch internet-facing systems - most ransomware follows exploited vulnerabilities.
- Segment networks so a compromised workstation cannot reach critical systems.
- Report incidents to CERT NZ / ACSC / CISA as applicable in your region.