Since early 2025, there has been a surge in cyberattacks linked to the Russian bulletproof hosting provider Proton66. These attacks include brute-force attempts, malware distribution, and ransomware campaigns, notably involving the SuperBlack and WeaXor ransomware families. Proton66 has been observed compromising WordPress sites to target Android devices. Among the ransomware threats, the FOG ransomware gang has gained attention for spreading malware accompanied by ransom notes referencing the U.S. Department of Government Efficiency (DOGE), a federal government efficiency initiative led by Elon Musk. The FOG gang taunts victims by demanding they provide details on their recent work accomplishments and encourages them to propagate the malware to other systems. Additionally, Russian organizations have been targeted by backdoors disguised as secure networking software updates. These developments underscore ongoing and evolving cybersecurity threats exploiting zero-day vulnerabilities and sophisticated malware delivery methods.
A ransomware gang is channeling Elon Musk’s Department of Government Efficiency by taunting victims with ransom notes that demand to know what they’ve "accomplished for work" in the last week.. https://t.co/aQJuGXkYTx https://t.co/kUwvfuuPfC
Docker Malware Exploits Teneo Web3 Node to Earn Crypto via Fake Heartbeat Signals: https://t.co/53euGCPTYo by The Hacker News #infosec #cybersecurity #technology #news
The FOG ransomware gang is taunting victims by ordering them to, 'Give me five bullet points on what you accomplished for work last week.' https://t.co/p8XvMC8aFy