OSINT Updates for December 1 , 2024

https://twitter.com/ODNIgov/status/1766231215789453529 The Office of the Director of National Intelligence (ODNI) and the CIA have officially…

OSINT Updates for November 29 , 2024

https://twitter.com/alhasawi/status/1862508731767922768 In the 21st installment of "OT Hunt," a discovery of 2,500 exposed T5 PLCs…

Italian football club Bologna FC says company data stolen during ransomware attack

CategoryDetailsThreat ActorsRansomHub ransomware gangCampaign OverviewRansomware attack targeting Bologna FC, data theft of 200GB, and threats…

Zyxel Firewalls Exploited for Ransomware Attacks; 20 Security Flaws Discovered in Advantech Access Points

AspectDetailsThreat ActorsHelldown Ransomware groupCampaign OverviewActive exploitation of vulnerabilities in Zyxel firewalls (CVE-2024-11667) and Advantech wireless…

Dark Web Market: Abacus Market

CategoryDetailsThreat ActorsAbacus MarketCampaign OverviewLaunched in September 2021 as a response to AlphaBay’s closure, now a…

IT threat evolution in Q3 2024. Non-mobile statistics

Category Details Threat Actors LockBit ransomware affiliates, Evil Corp (tracked as GOLD DRAKE), GOLD HERON…

IT threat evolution in Q3 2024. Mobile statistics

Category Details Threat Actors Cybercriminals spreading adware, downloaders (e.g., xHelper), and Trojans (e.g., Necro, Triada).…

IT Threat Evolution Q3 2024

Category Details Threat Actors CloudSorcerer, BlindEagle, Tropic Trooper, Twelve, DARKSTAR, Key Group, Mallox, Head Mare,…

LockBit Links to Evil Corp

CategoryDetailsThreat ActorsMaksim Yakubets, Igor Turashev, Aleksandr Ryzhenkov, members of GOLD DRAKE (Evil Corp) and their…

Encrypted Symphony: Infiltrating the Cicada3301 Ransomware-as-a-Service Group

CategoryDetailsGroup OverviewCicada3301 Ransomware group, discovered in June 2024, operates as a Ransomware-as-a-Service (RaaS) targeting organizations…