FIN7 Archives • Daily CyberSecurity

GrayAlpha’s Expanding Arsenal: FIN7-Aligned Threat Actor Deploys Custom Loaders to Spread NetSupport RAT GrayAlpha, FIN7

GrayAlpha’s Expanding Arsenal: FIN7-Aligned Threat Actor Deploys Custom Loaders to Spread NetSupport RAT

Do Son June 17, 2025

A newly uncovered campaign by threat actor GrayAlpha, which overlaps with the infamous FIN7 cybercrime syndicate, reveals...

FIN7’s New Stealth Weapon: AnubisBackdoor Emerges in the Wild DriverFixer0428, Contagious Interview Cache Smuggling, ClickFix Evasion North Korean Cyber Espionage

DriverFixer0428, Contagious Interview Cache Smuggling, ClickFix Evasion North Korean Cyber Espionage

FIN7’s New Stealth Weapon: AnubisBackdoor Emerges in the Wild

Do Son March 18, 2025

Threat intelligence company PRODAFT uncovers a new Python-based backdoor named AnubisBackdoor, wielded by the infamous FIN7 group,...

Anonymous VPS Provider BitLaunch Under Fire for Facilitating Ransomware Attacks BitLaunch hosting provider

Anonymous VPS Provider BitLaunch Under Fire for Facilitating Ransomware Attacks

Do Son February 18, 2025

Independent security researcher BushidoToken release of a report that delves deep into the murky world of anonymous...

STAC5143 and STAC5777: New Ransomware Campaigns Target Microsoft Office 365 Users NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

STAC5143 and STAC5777: New Ransomware Campaigns Target Microsoft Office 365 Users

Do Son January 23, 2025

Sophos X-Ops has uncovered two distinct ransomware campaigns to infiltrate organizations via Microsoft Office 365 and Teams....

Unmasking PackXOR: The FIN7 Packer Exposed PackXOR

Unmasking PackXOR: The FIN7 Packer Exposed

Do Son September 7, 2024

HarfangLab published an in-depth analysis of a newly identified private packer dubbed “PackXOR,” a tool used by...

Cybersecurity Alert: FIN7 Expands Arsenal with New AvNeutralizer Variant

Do Son July 23, 2024

Experts at SentinelLabs have uncovered new evidence that the infamous hacker group FIN7 continues to refine its attack...

Inside DiceLoader: How FIN7’s Malware Masters Evasion DiceLoader malware

Inside DiceLoader: How FIN7’s Malware Masters Evasion

Do Son February 4, 2024

Recently, security researchers from Sekoia TDR (Threat Detection & Research) have delved into the inner workings of...

Critical Alert 1 Active Exploit Detected Today

GrayAlpha’s Expanding Arsenal: FIN7-Aligned Threat Actor Deploys Custom Loaders to Spread NetSupport RAT

FIN7’s New Stealth Weapon: AnubisBackdoor Emerges in the Wild

Anonymous VPS Provider BitLaunch Under Fire for Facilitating Ransomware Attacks

STAC5143 and STAC5777: New Ransomware Campaigns Target Microsoft Office 365 Users

Unmasking PackXOR: The FIN7 Packer Exposed

Cybersecurity Alert: FIN7 Expands Arsenal with New AvNeutralizer Variant

Inside DiceLoader: How FIN7’s Malware Masters Evasion