
CrazyHunter Ransomware
CrazyHunter is a ransomware campaign targeting healthcare that weakens endpoint defenses and escalates privileges before encrypting systems at scale.

The HUNTER Platform streamlines organizations’ threat hunting operations and processes. Whether you are a mature, battle-hardened, hunt team, or just getting started, the HUNTER threat hunting content platform will get you hunting faster and more repeatable. HUNTER isn’t just for threat hunters though – it can upskill and reskill existing SOC teams into threat hunters and extend scarce content and SIEM engineering resources!
Check out some of the ways Cyborg Security’s customers and partners are using the HUNTER threat hunting content platform!
The HUNTER Platform helps security teams recognize and increase the ROI of their existing security tools. HUNTER enables security teams to significantly enhance the capabilities of organizations’ existing SIEM, EDR, NDR, and XDR toolsets without the need to rip and replace another appliance or agent. Instead, the HUNTER Platform can deliver best-in-class threat hunting content while allowing organizations to continue to use their existing tools and platforms.

CrazyHunter is a ransomware campaign targeting healthcare that weakens endpoint defenses and escalates privileges before encrypting systems at scale.

DevMan Ransomware is a newly emerging ransomware operation observed in 2025 that has been assessed as a derivative of the DragonForce ransomware family.

Gootloader resurfaced with enhanced capabilities, building on the multi-stage loader malware first seen in 2020.
Stay informed with our weekly executive update, sending you the latest news and timely data on the threats, risks, and regulations affecting your organization.