Do Son
At a glance Threat actor Unnamed group with links to East Asia (moderate-to-high confidence) Activity type Targeted...
Telegram C2
At a glance Actor / group UAT-11795 (suspected Russian-speaking, financially motivated) Activity type Credential and cryptocurrency theft...
At a glance Malware family ClickLock Stealer (new, named by Group-IB) Threat actor Unattributed. No actor or...
Vidar, once a straightforward credential stealer, has officially completed its transformation into a “multi-stage, stealth-driven attack framework”....
Following the high-profile takedowns of major players like Lumma and RedLine in 2025, CyberProof MDR analysts have...
A deep-dive analysis by the Splunk Threat Research Team (STRT) has shed light on BlankGrabber, a Python-based...
The Federal Bureau of Investigation (FBI) has issued a high-priority “FLASH” alert detailing a sophisticated cyber-intelligence operation...
A highly active social engineering campaign is rewriting the phishing playbook by shifting its focus from simple...
A new wave of targeted cyber-espionage is sweeping across the Middle East and North Africa (MENA) region....
A sophisticated espionage campaign targeting senior defense and government officials has been linked to APT42, an Iranian...
In a disturbing fusion of human rights abuses and artificial intelligence, researchers at HarfangLab have uncovered a...
After years of radio silence that led many to believe they had disbanded, one of Iran’s most...
A newly published report from CyberArmor has uncovered a months-long espionage campaign targeting government and media organizations...
A new report from Group-IB exposes a highly automated phishing framework engineered to impersonate Italian IT and...
Researchers from Cyble Research and Intelligence Labs (CRIL) have uncovered a massive, multi-brand phishing campaign that uses...
Tap-and-Steal: Over 760 Android Apps Exploit NFC/HCE for Payment Card Theft in Global Financial Scam
Tap-and-Steal: Over 760 Android Apps Exploit NFC/HCE for Payment Card Theft in Global Financial Scam
Researchers from Zimperium zLabs have uncovered a rapidly growing cybercrime trend involving Android applications that abuse NFC...
Researchers from Netskope have uncovered a new cross-platform Python-based Remote Access Trojan (RAT) disguised as a popular...
A new report from Cyble Research and Intelligence Labs (CRIL) has uncovered a sophisticated Android malware campaign...
FortiGuard Labs has identified a new and active Stealit malware campaign that abuses the Node.js Single Executable...
Security researchers at Point Wild have uncovered a new information-stealing malware dubbed Shuyal Stealer, which pushes the...
The threat actor known as Cavalry Werewolf has been observed ramping up its operations between May and...
Cofense Intelligence has uncovered an evolving phishing campaign that uses copyright takedown notices as its primary lure....