Hackers Exploiting Linux eBPF to Spread Malware in Ongoing Campaign

Category Details Threat Actors - Likely government-backed hackers and cybercriminals Campaign Overview - Linux malware…

HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft

Category Details Threat Actors - Unspecified, likely cybercriminal groups leveraging phishing and credential theft Campaign…

UAC-0125 Attack Detection: Hackers Use Fake Websites on Cloudflare Workers to Exploit the “Army+” Application

Category Details Threat Actors - UAC-0125, linked to russia-backed UAC-0002 (aka APT44, Sandworm, UAC-0133) Campaign…

Androxgh0st Botnet Targets IoT Devices, Exploiting 27 Vulnerabilities

Category Details Threat Actors - Androxgh0st botnet, integration with Mozi botnet, potential links to Chinese…

APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP

Category Details Threat Actors - Russia-linked APT29 (tracked as Earth Koshchei) Campaign Overview - Targeting…

Dark Web Market: BidenCash

Category Details Threat Actors - Cybercriminals using BidenCash dark web marketplace Campaign Overview - BidenCash…

Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

CategoryDetailsThreat ActorsC.A.S (Cyber Anarchy Squad)Campaign OverviewAttacking organizations in Russia and Belarus since 2022 with goals…

Nebraska AG sues Change Healthcare, UnitedHealth for data theft after ransomware attack

Key Detail Information Threat Actors Unknown ransomware group Campaign Overview Ransomware attack on Change Healthcare,…

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware

Key Detail Information Threat Actors Unknown actors using social engineering to impersonate a client and…

Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs

CategoryDetailsThreat ActorsTA397 (also known as Bitter)Campaign OverviewTargeted Turkish defense sector with spearphishing email containing RAR…