Malware
RansomExx
- First Reported
- Oct 27, 2020
- Latest Reported
- Jun 23, 2026
Reported Context (2)
- Take CVE-2025-29824, a Windows CLFS use-after-free that escalates to SYSTEM (seen in the wild in Storm-2460 → RansomEXX activity). TTP-Chain Validation Offers a Way to Assess Exploitability Without Live Exploits
- it is worth noting that only a few weeks ago, in late September, Tyler Technologies was hit with RansomExx, a malicious strain of ransomware that began circulating the darknet in late May and early June of this Darknet Discussions Highlight Election-System Risks and Exposed Voter Data
CVE (1)
People (1)
Threat Actors (2)
MITRE ATT&CK (11)
Vendors (6)
Products (11)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.