HIGHRansomware
Global

Payouts King ransomware uses QEMU VMs to bypass endpoint security

·Source: BleepingComputer

Updated:

Executive Summary

The Payouts King ransomware is using the QEMU emulator as a reverse SSH backdoor to run hidden virtual machines on compromised systems and bypass endpoint security. [...]

Analysis

The Payouts King ransomware is using the QEMU emulator as a reverse SSH backdoor to run hidden virtual machines on compromised systems and bypass endpoint security. [...]
Source Attribution

Originally published by BleepingComputer on Apr 17, 2026.

Related Threats

HIGHRansomware

Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17)

Unit 42 details recent Iranian cyberattack activity, sharing direct observations of phishing, hacktivist activity and cybercrime. We include recommendations for defenders. The post Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17) appeared first on Unit 42 .

Unit 42 (Palo Alto)
HIGHRansomware

Ransomware attack continues to disrupt healthcare in London nearly two years later

More than 18 months after a ransomware attack disrupted care at hospitals in South East London, documents show at least one NHS trust is still working without fully restored systems and managing large backlogs of delayed test results.

The Record
HIGHRansomware

Two Senior Care Providers Affected by Ransomware Attacks

Two providers of senior services have recently disclosed data security incidents. Windward Life Care in California and Legend Senior Care […] The post Two Senior Care Providers Affected by Ransomware Attacks appeared first on The HIPAA Journal .

HIPAA Journal