Targeted Iranian Attacks Against Iraqi Government Infrastructure

CategoryDetailsThreat ActorsIranian state-affiliated group, potentially linked to MOIS and APT34.Campaign OverviewAttacks on Iraqi government infrastructure…

BlindEagle flying high in Latin America

CategoryDetailsThreat ActorsBlindEagle (APT-C-36)Campaign OverviewTargeting entities in Latin America (primarily Colombia) with espionage and financial attacks.Target…

CloudSorcerer – A new APT targeting Russian government entities

CategoryDetailsThreat ActorsCloudSorcererCampaign OverviewAdvanced persistent threat (APT) targeting Russian government entities, primarily for cyber espionage.Target Regions…

LightSpy: APT41 Deploys Advanced DeepData Framework In Targeted Southern Asia Espionage Campaign

CategoryDetailsThreat ActorsAPT41, Chinese cyber-espionage group, also known as Double DragonCampaign OverviewEvolution of LightSpy malware with…

TTP Today Fraud & Intelligence Insights Report Q1-Q3 2024

CategoryDetailsThreat ActorsFraudsters targeting high-demand sectors using advanced techniques like BIN testing, OTP spoofing, SIM swapping,…

Diplomats Beware: Cloaked Ursa Phishing With a Twist

CategoryDetailsThreat ActorsCloaked Ursa (aka APT29, UAC-0004, Midnight Blizzard/Nobelium, Cozy Bear), linked to Russia's Foreign Intelligence…

Fortinet VPN zero-day exploited by Chinese threat actor

CategoryDetailsThreat ActorsBrazenBamboo (China-linked threat actor).Campaign OverviewExploiting a zero-day vulnerability in Fortinet’s FortiClient VPN for Windows…

NodeStealer Malware Targets Facebook 

CategoryDetailsThreat ActorsNodeStealer (Vietnamese threat actors); ClickFix (unattributed, including suspected Russian actors targeting Ukraine).Campaign OverviewNodeStealer targets…

Dark Web Profile: Moonstone Sleet

CategoryDetailsThreat ActorsMoonstone Sleet (aka Storm-1789), a North Korean state-sponsored APT group.Campaign OverviewActive since early 2024,…

Seeing Through a GLASSBRIDGE: Understanding the Digital Marketing Ecosystem Spreading Pro-PRC Influence Operations

CategoryDetailsThreat ActorsGLASSBRIDGE (umbrella group), DRAGONBRIDGE (linked campaigns), Haixun, DURINBRIDGE, Shenzhen Bowen MediaCampaign OverviewCoordinated influence campaigns…