Hardening Library

Security research, tutorials, and product updates from the Retrievy team

Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.

Filters: #threat-intel × Clear all

3 articles match

of 34 total

Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network

Threat Intel

May 28, 2026 3 min read

Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network

The Gentlemen ransomware, deployed by Storm-2697 affiliates, is a Go-based encryptor that combines ephemeral per-file key encryption with aggressive built-in lateral movement to self-propagate across networks without operator intervention.

Retrievy Team

Read Now

Ransomware Hits Backups First — Your Recovery Plan Is the Target

Threat Intel

May 08, 2026 4 min read

Ransomware Hits Backups First — Your Recovery Plan Is the Target

Attackers don't ignore your backups — they hunt them down before triggering encryption. Here's why most backup strategies fail at exactly the moment they're needed most.

Retrievy Team

Read Now

MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen

Threat Intel

May 07, 2026 3 min read

MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen

Iranian threat group MuddyWater is deploying Chaos ransomware as a distraction while conducting actual espionage via Microsoft Teams social engineering — a double-layer deception operators need to account for.

Retrievy Team

Read Now

Security research, tutorials, and product updates from the Retrievy team

Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network

Ransomware Hits Backups First — Your Recovery Plan Is the Target

MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen

Cookie Preferences