CVE-2025-24472

A ransomware-as-a-service (RaaS) operation called VanHelsing has already claimed three victims since it launched on March 7, 2025, demanding ransoms as high as $500,000. "The RaaS model allows a wide range of participants, from experienced hackers to newcomers, to get involved with a $5,000 deposit. Affiliates keep 80% of the ransom payments, while the core operators earn 20%," Check Point said

Derzeit nutzt eine neue Ransomware-Gruppe namens „Mora_001“ zwei Schwachstellen aus, um die Kontrolle über Fortinet-Firewalls zu über­nehmen. Für ihre Aktivitäten haben die Kriminellen einen speziellen Wiper entwickelt, der die Analyse ihrer Ransomware erschwert.