GoKawiil
Tech News
The ATF confirmed a cyberattack on a standalone system separate from its main network, formally classifying it as a 'major incident' that requires notifying Congress within a week. An ATF spokesperson said the affected system held sensitive data, including targets of ATF investigations. The Qilin ransomware gang has claimed responsibility on its leak site, though it has not published proof such as stolen data samples.
The ATF acknowledged that a standalone system separate from its main network was compromised, calling it a 'major incident' after the Qilin ransomware gang listed the agency on its dark web leak site. The agency said the affected system does not connect to its enterprise network or eForms platform, and is now working with the Department of Justice to investigate the breach.
NCC Group's July threat advisory reports a 22% month-over-month rise in ransomware activity, with 894 victim organization listings recorded across industrial, consumer services, technology, critical infrastructure, finance and healthcare sectors. The Gentlemen and Quilin topped the list of attributed groups, while the US accounted for 41% of incidents; notably, the month also saw the first fully agentic AI-driven ransomware attack chain and a breach at Ernst & Young claimed by ShinyHunters.
Researchers have identified a sophisticated malware toolkit called SynkLoader that revives an old screen-hijacking technique to steal passwords while also incorporating a range of newer capabilities. The malware supports multiple languages and functions as a multitool, suggesting it could serve as a precursor to ransomware deployment.