CyberSum logo
Back

Beast Ransomware Emerges as Major Cyber Threat

Cyber Security News by CyberSum.net
4 sources
Beast ransomware, a sophisticated Ransomware-as-a-Service (RaaS) operation, has been actively targeting organizations globally since July 2025. It employs aggressive network propagation tactics using SMB port scanning and operates through a Tor-based data leak site. The ransomware affects diverse sectors, including manufacturing, healthcare, and education, and uses ChaCha20 encryption. Initial compromise often occurs through phishing campaigns, and the malware includes geofencing logic to exclude certain regions. Organizations must prioritize preventive measures such as vulnerability assessments and robust backup systems.

Also Read

PhantomRaven Supply-Chain Attack Infects npm Ecosystem

Koi Security has uncovered a massive supply-chain campaign dubbed PhantomRaven, which has silently infected the npm ecosystem with 126 malicious packages downloaded over 86,000 times. The campaign, active since August 2025, steals npm authentication tokens, GitHub credentials, and CI/CD secrets while concealing its malicious code in dependencies invisible to most security scanners. The attackers used Remote Dynamic Dependencies (RDD) and a novel infection vector called slopsquatting, which leverages AI-driven hallucinations to create plausible-sounding package names.

By Cyber Security News by CyberSum.net