Do Son
At a glance Actor Unnamed threat actor, likely a ransomware initial access broker Activity Vishing-led intrusion and...
initial access broker
At a Glance Malware family Edgecution (malicious Microsoft Edge extension plus a Python backdoor) Threat actor Initial...
A sophisticated digital campaign is currently compromising thousands of web ecosystems across the internet. Specifically, defensive intelligence...
A federal judge handed down a stiff prison term to an international cybercriminal yesterday. Specifically, a Romanian...
Corporate collaboration platforms have officially moved to the top of the initial access broker playbook. A new...
A new and operationally disciplined threat actor has emerged, demonstrating just how quickly a “mid-tier” criminal group...
A 26-year-old Russian national has been sentenced to 81 months in prison for his pivotal role in...
A stealthy new cyber espionage campaign is targeting Ivanti Endpoint Manager Mobile (EPMM), but unlike typical ransomware...
The sprawling, murky network known as ShadowSyndicate has evolved. Previously identified by a singular, careless digital fingerprint,...
TA584, a sophisticated Initial Access Broker (IAB) known for paving the way for ransomware gangs, has dramatically...
What started as a seemingly targeted holiday raid on Adobe ColdFusion servers has unraveled into a sprawling,...
A notorious initial access broker (IAB) known as “Storm-0249” has radically shifted its tactics, moving from broad...
A highly active cybercriminal group has shifted tactics in a long-running campaign that abuses remote monitoring and...
Silent Push Threat Analysts have detailed one of today’s most pervasive cyber threats—SocGholish—exposing its deep ties to...
In a significant revelation from Unit 42, Palo Alto Networks’ threat intelligence team, researchers have uncovered a...
The French cybersecurity agency ANSSI has exposed a sophisticated threat actor dubbed Houken. First observed exploiting zero-day...
Cybersecurity researchers from Palo Alto Networks’ Unit 42 have uncovered an extensive and methodical attack campaign targeting...
Recently, WithSecure’s Threat Intelligence team uncovered a sophisticated malware campaign where the open-source password manager KeePass was...
In a newly published threat report, Cisco Talos has revealed an ongoing spam campaign targeting Portuguese-speaking users...
Cisco Talos’ 2023 incident response report unveils the operations of “ToyMaker,” a financially motivated Initial Access Broker...