Do Son
At a glance Actor: Unknown threat actor Activity Type: Privilege escalation and zero-day exploitation Targets: Service provider...
Cybercriminals
At a glance Actor: Suspected Chinese-speaking threat actor (low confidence) Activity Type: Malware distribution and silent RMM...
At a glance Actor: Suspected cybercriminal networks (e.g., “Supplier Carl” and “Homborg Online Handel”) Activity Type: Fake...
At a glance Actor: Suspected Indonesian-origin threat actor (“Wong Gen Deng”) Activity Type: Unauthenticated Remote Code Execution...
At a Glance Actor / group SocGholish operator (TA569), linked to Russia’s Evil Corp; Amadey and StealC...
At a Glance Actors Multiple threat actors (no single named group); strong Chinese-language focus Activity FIFA-themed fraud:...
At a Glance Platform abused claude.ai shared chat feature (Anthropic) and GitLab Pages Data exposed Browser credentials,...
At a Glance Actor or Group: 455 defendants, including 90 medical professionals. Activity Type: Alleged false claims,...
At a glance Actor / group Unattributed, financially motivated operators (multiple GitHub accounts) Activity type Multi-brand bank...
At a Glance Actor: Suspected single Chinese operator Activity Type: Cloud DNS takeover, SEO poisoning Targets: 163...
At a Glance Actor or Group: Unidentified cyber criminals Activity Type: Malicious website redirection and malware distribution...
At a Glance Actor: UNC6508 (suspected PRC-nexus threat actor) Activity Type: Cyber espionage, bespoke malware deployment, data...
Cybercriminals are actively exploiting ArcGIS Account Recovery configurations to penetrate customer environments. Esri confirms these targeted attempts...
A clever new phishing technique skips the password entirely. ReversingLabs has uncovered an active device code phishing...
Poland’s national cyber team has sounded the alarm. A fresh UNC1151 Gmail phishing campaign is hunting credentials...
A China-nexus threat group known as Velvet Ant hid inside one organization’s network for nearly a decade....
Your firewall is supposed to keep attackers out. Yet a sweeping new campaign turns that assumption on...
OpenAI has disrupted two covert China influence operations that weaponized ChatGPT against America’s AI policy debate. The...
Cybercriminals have changed tactics, and online shoppers are paying the price. A newly analyzed WooCommerce payment skimmer...
As artificial intelligence continues to dominate tech headlines, cybercriminals are quickly cashing in on the hype. Recent...
An AI Agent Spots What Analysts Might Have Missed ReliaQuest Threat Research has identified a new espionage...
A Fast-Moving Threat Targets the Legal Sector Mandiant has detailed an active and aggressive UNC3753 vishing campaign...