Index live· 1,284 files · 148 editions
ForensicPost

Search the index

6 results
Try
Results for “Play”Newest first
25-1231
File

A Fragmented Extortion Ecosystem Changes What Paying a Ransom Buys

The case for paying depended on a repeat player with a reputation to protect. Seventy-three new entrants in a year removes exactly that.

MultipleVariousMultipleAnalysis
Sev 4TargetExtortion negotiationActorMultiple
25-1109
File

Qilin Led Telecom Ransomware Activity in 2025, Ahead of Akira and Play

An ecosystem-wide long tail alongside sector concentration. Both are true, and it complicates the corpus’s own argument.

QilinRansomware-as-a-serviceTelecomActors
Sev 4TargetTelecommunications sectorActorQilin
25-0522
File

A Utility That Was Pre-Positioned in Briefed the People Who Would Have to Respond

Every playbook assumes an event. Pre-positioning has none — the adversary is deliberately behaving like an administrator.

Volt TyphoonUtilitiesUtilities
Sev 4TargetUS utilityActorVolt TyphoonUSA
25-0402
File

Akira, PLAY and RansomHub Absorbed the Disrupted Leader's Affiliates

In a lawful market, removing the dominant supplier reduces volume because capacity is expensive to replace. Here the capacity is software.

MultipleRansomware-as-a-serviceMultipleAnalysis
Sev 4TargetRansomware ecosystemActorMultiple
23-0614
File

Play Published 65,000 Swiss Federal Documents Taken From Contractor Xplain

The federal files were a twentieth of the dump. The rest belonged to everyone else the supplier served.

PlayGovernmentPublic sector
Sev 5TargetXplain / Swiss Federal AdministrationActorPlaySwitzerland
22-1202
File

The Hosted Email Service Did Not Come Back

The stopgap became the destination. Hosted Exchange was retired rather than restored.

PlayCVE-2022-41080 — zero-dayTechnologyAvailability
Sev 4TargetRackspaceActorPlayUSA
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging