Threat Predictions for 2025: Get Ready for Bigger, Bolder Attacks

Topic Key Insights Evolving Cybercrime Tactics Cybercriminals are using more specialized Cybercrime-as-a-Service (CaaS) offerings, combining…

OSINT Updates for November 21 , 2024

https://twitter.com/RakeshKrish12/status/1859476613962006541 https://twitter.com/RedPacketSec/status/1859395091539902864 https://twitter.com/RedPacketSec/status/1859388523238895878 https://twitter.com/RedPacketSec/status/1859395097902604390 https://twitter.com/stealthmole_iol/status/1859433837832655260 https://twitter.com/TMRansomMon/status/1859488698724761825 https://twitter.com/TMRansomMon/status/1859485658428932507

‘SteelFox’ Malware Blitz Infects 11K Victims With Bundle of Pain

CategoryDetailsThreat ActorsUnidentified; deploying the SteelFox malware campaign.Campaign OverviewActive since February 2023, SteelFox is a mass-targeting…

CVE-2024-9264: A Critical Vulnerability in Grafana : Vulnerability Analysis and Exploitation

CategoryDetailsThreat ActorsNation-state Actors, Cybercriminals, and Insiders exploiting CVE-2024-9264.Campaign OverviewCVE-2024-9264 enables low-privilege users to execute arbitrary…

FBI says BianLian Based in Russia, Moving from Ransomware Attacks to Extortion

Category Details Threat Actors BianLian Ransomware group, likely based in Russia with Russian affiliates. Campaign…

Phobos Ransomware Indictment Sheds Light on Long-Running, quietly Successful Scheme

Category Details Threat Actors Phobos Ransomware group; key figure: Russian National Evgenii Ptitsyn. Campaign Overview…

Five alleged members of Scattered Spider cybercrime group charged for breaches, theft of $11 million

Category Details Threat Actors Scattered Spider (also referred to as "The Community" or "The Com").…

Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”

Key Detail Description Threat Actors Iranian threat actor, MuddyWater (TA450). Campaign Overview Phishing campaign using…

ELPACO-Team Ransomware: A New Variant of the MIMIC Ransomware Family

CategoryDetailsThreat Actors ELPACO-Team ransomware identified as part of the Mimic ransomware family, potentially linked to…

Threat Assessment: Ignoble Scorpius, Distributors of BlackSuit Ransomware

CategoryDetailsThreat ActorsIgnoble Scorpius (formerly Royal ransomware, also tied to Conti)Campaign OverviewIncreased activity from March 2024…