Nitrogen Ransomware Uses Cobalt Strike and Log Wiping in Targeted Attacks on Organizations

Nitrogen Ransomware Actors Attacking Organization With Cobalt Strike & Erases Log Data | #ransomware | #cybercrime - National Cyber Security Consulting

The Nitrogen ransomware group was first detected in September 2024 and initially it targeted organizations in the United States and Canada before expanding operations into parts of Africa and Europe. While ransomware.live currently reports 21 known victims, security researchers believe many compromised organizations remain unlisted on Nitrogen’s public blog. Notably, indicators of this malware family […] Thank you for subscribing to our RSS feed…

The State of Ransomware 2025

BlackFog's state of ransomware report 2025 measures publicly disclosed and non-disclosed attacks globally.

Nitrogen Ransomware Uses Cobalt Strike and Log Wiping in Targeted Attacks on Organizations

Threat actors have leveraged the Nitrogen ransomware campaign to target organizations through deceptive malvertising strategies. Recent investigations have uncovered a disturbingly effective method involving fake software downloads, such as a counterfeit “WinSCP” installer, propagated through malicious ads on platforms like Bing. One documented case revealed a user searching for “WinSCP download” via Microsoft Edge being […] The post Nitrogen Ra…