HIGHRansomware
Global

IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases

·Source: Cisco Talos

Updated:

Executive Summary

Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.

Analysis

Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
Source Attribution

Originally published by Cisco Talos on Oct 29, 2026.

Related Threats

HIGHRansomware

BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center

Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware group attacked the University of New Mexico's Health Sciences Center (HSC) this week. Read more in my article on the Fortra blog.

Graham Cluley
HIGHRansomware

Hospital Ransomware Attacker Receives 70 Month Jail Term

A Ukrainian affiliate of the Nefilim & Hive ransomware operations who attacked hospitals, government entities, and businesses over a three-year […] The post Hospital Ransomware Attacker Receives 70 Month Jail Term appeared first on The HIPAA Journal .

HIPAA Journal
HIGHRansomware

Officials seize domain of top bulletproof hosting provider Virtualine

The Russian-speaking cybercrime storefront was among the most active bulletproof hosting providers this year to date, receiving almost one-fifth of all illicit-attributed inflow tracked by researchers. The post Officials seize domain of top bulletproof hosting provider Virtualine appeared first on CyberScoop .

CyberScoop