Click here to download all references as Bib-File.•
| 2025-11-18
⋅
⋅
Cert-UA
⋅
Cyberattack against an educational institution in eastern Ukraine using the GAMYBEAR software tool (CERT-UA#18329) GAMYBEAR UAC-0241 |
| 2025-11-17
⋅
KELA
⋅
ByteToBreach: A Deep Dive into a Persistent Data Leak Operator ByteToBreach |
| 2025-11-17
⋅
moldovalive
⋅
War in the shadows of servers: how a Russian company could have organized an attack against Stark Industries from Moldova |
| 2025-11-17
⋅
The HIPAA Journal
⋅
Doctor Alliance Investigating 353 GB Data Theft Claim Kazu |
| 2025-11-17
⋅
0x0d4y
⋅
Nation-State Actor’s Arsenal: An In-Depth Look at Lazarus’ ScoringMathTea ScoringMathTea |
| 2025-11-15
⋅
Elastic
⋅
RONINGLOADER: DragonBreath’s New Path to PPL Abuse DragonBreath RONINGLOADER |
| 2025-11-14
⋅
The Record
⋅
Multiple US citizens plead guilty to helping North Korean IT workers earn $2 million |
| 2025-11-13
⋅
Push Security
⋅
Analyzing "Scattered Lapsus$ Hunters" breaches since 2021 Scattered Lapsus Hunters |
| 2025-11-13
⋅
Ransom-ISAC
⋅
Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 3) JADESNOW |
| 2025-11-13
⋅
Politie NL
⋅
Again criminal infrastructure dismantled in international ransomware operation Rhadamanthys Venom RAT |
| 2025-11-13
⋅
NVISO Labs
⋅
Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery BeaverTail OtterCookie InvisibleFerret Beavertail TsunamiKit |
| 2025-11-13
⋅
Anthropic
⋅
Disrupting the first reported AI-orchestrated cyber espionage campaign GTG-1002 |
| 2025-11-13
⋅
Israel National Digital Agency
⋅
SpearSpecter: Unmasking Iran’s IRGC Cyber Operations Targeting High-Profile Individuals TAMECAT |
| 2025-11-12
⋅
ISC
⋅
SmartApeSG campaign uses ClickFix page to push NetSupport RAT SmartApeSG NetSupportManager RAT |
| 2025-11-11
⋅
Botcrawl
⋅
National Civil Service Commission of Colombia Data Breach Exposes 2.9 TB of Government Files Kazu |
| 2025-11-10
⋅
Mandiant
⋅
No Place Like Localhost: Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480 UNC6485 |
| 2025-11-10
⋅
Genians
⋅
State-Sponsored Remote Wipe Tactics Targeting Android Devices Quasar RAT Remcos |
| 2025-11-05
⋅
ESET Research
⋅
ESET APT Activity Report (April 2025 – September 2025): Russia-Aligned APTs Ramp Up Attacks Against Ukraine and Its Strategic Partners BACKORDER BloodAlchemy ImprudentCook RokRAT ScoringMathTea |
| 2025-11-05
⋅
Google
⋅
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools PromptLock UNC1069 |
| 2025-11-05
⋅
Huntress Labs
⋅
Gootloader Returns: What Goodies Did They Bring? GootLoader MeowBackConn Supper |