-
Guest - Ransomware
- December 19, 2024
US seeks extradition of alleged LockBit ransomware developer from Israel
Category Details Threat Actors Rostislav Panev (Israeli citizen), LockBit ransomware group, LockBitSupp (leader, Dmitry Khoroshev),…
Sandworm-linked hackers target users of Ukraine’s military app in new spying campaign
Category Details Threat Actors Sandworm (linked to Russian military intelligence, GRU), UAC-0125, APT44 Campaign Overview…
Lazarus group evolves its infection chain with old and new malware
Category Details Threat Actors Lazarus Group (North Korean state-sponsored) Campaign Overview DeathNote campaign (also called…
UAC-0125 Abuses Cloudflare Workers to Distribute Malware Disguised as Army+ App
Category Details Threat Actors UAC-0125 (linked to APT44, FROZENBARENTS, Sandworm, Seashell Blizzard, Voodoo Bear, GRU…
CISA urges senior government officials to lock down mobile devices amid ongoing Salt Typhoon breach
Category Details Threat Actors Chinese government hackers (Salt Typhoon). Campaign Overview Breached U.S. telecommunications networks,…
-
Guest
- Cyber Crime
- December 18, 2024
FBI Warns of HiatusRAT Malware Targeting Webcams and DVRs
Category Details Threat Actors HiatusRAT malware operators. Campaign Overview Targeting Chinese-branded web cameras and DVRs,…
-
Guest
- Ransomware
- December 18, 2024
NotLockBit: A Deep Dive Into the New Ransomware Threat
Category Details Threat Actors NotLockBit ransomware operators. Campaign Overview NotLockBit mimics LockBit ransomware; targets macOS…
-
Guest
- Cyber Crime
- December 18, 2024
Hackers Exploiting Linux eBPF to Spread Malware in Ongoing Campaign
Category Details Threat Actors - Likely government-backed hackers and cybercriminals Campaign Overview - Linux malware…
UAC-0125 Attack Detection: Hackers Use Fake Websites on Cloudflare Workers to Exploit the “Army+” Application
Category Details Threat Actors - UAC-0125, linked to russia-backed UAC-0002 (aka APT44, Sandworm, UAC-0133) Campaign…
APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP
Category Details Threat Actors - Russia-linked APT29 (tracked as Earth Koshchei) Campaign Overview - Targeting…
