Hackers Exploiting Linux eBPF to Spread Malware in Ongoing Campaign
Category Details Threat Actors - Likely government-backed hackers and cybercriminals Campaign Overview - Linux malware…
HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft
Category Details Threat Actors - Unspecified, likely cybercriminal groups leveraging phishing and credential theft Campaign…
UAC-0125 Attack Detection: Hackers Use Fake Websites on Cloudflare Workers to Exploit the “Army+” Application
Category Details Threat Actors - UAC-0125, linked to russia-backed UAC-0002 (aka APT44, Sandworm, UAC-0133) Campaign…
Androxgh0st Botnet Targets IoT Devices, Exploiting 27 Vulnerabilities
Category Details Threat Actors - Androxgh0st botnet, integration with Mozi botnet, potential links to Chinese…
APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP
Category Details Threat Actors - Russia-linked APT29 (tracked as Earth Koshchei) Campaign Overview - Targeting…
Dark Web Market: BidenCash
Category Details Threat Actors - Cybercriminals using BidenCash dark web marketplace Campaign Overview - BidenCash…
Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations
CategoryDetailsThreat ActorsC.A.S (Cyber Anarchy Squad)Campaign OverviewAttacking organizations in Russia and Belarus since 2022 with goals…
Nebraska AG sues Change Healthcare, UnitedHealth for data theft after ransomware attack
Key Detail Information Threat Actors Unknown ransomware group Campaign Overview Ransomware attack on Change Healthcare,…
Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware
Key Detail Information Threat Actors Unknown actors using social engineering to impersonate a client and…
Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs
CategoryDetailsThreat ActorsTA397 (also known as Bitter)Campaign OverviewTargeted Turkish defense sector with spearphishing email containing RAR…