Click here to download all references as Bib-File.•
| 2026-04-15
⋅
⋅
Cert-UA
⋅
Hospitals, local governments, and FPV operators are in the focus of the UAC-0247 (UAC-0244) cyber threat cluster SILENTLOOP AGINGFLY Chisel Havoc xmrig |
| 2026-04-15
⋅
Orange Cyberdefense
⋅
Smoking Out an Affiliate: SmokedHam, Qilin, a few Google Ads and some Bossware Qilin AgendaCrypt SMOKEDHAM |
| 2026-04-15
⋅
Orange Cyberdefense
⋅
Smoking Out an Affiliate: SmokedHam, Qilin, a few Google ads and some bossware AgendaCrypt SMOKEDHAM |
| 2026-04-14
⋅
Gen
⋅
Chasing an Angry Spark |
| 2026-04-14
⋅
ANY.RUN
⋅
When Trust Becomes a Weapon: Google Cloud Storage Phishing Deploying Remcos RAT Remcos |
| 2026-04-13
⋅
Dark Web Informer
⋅
Polish Eco-Friendly Retailer VegeHome Suffers Data Breach Exposing 100K+ Customers LulzIntel |
| 2026-04-13
⋅
Dataminr
⋅
Cyber Intel Brief: Pro-Iranian Actor Ababil of Minab Claims Cyberattack on LA Metro (LACMTA) Ababil of Minab |
| 2026-04-13
⋅
Cleafy
⋅
Mirax: a new Android RAT turning infected devices into potential residential proxy nodes Mirax |
| 2026-04-10
⋅
DailyDarkWeb
⋅
Guangdong Caiding Market Group Faces Data Breach After Extortion SnowSoul |
| 2026-04-10
⋅
Infoblox
⋅
Scams, Slaves and (Malware-as-a) Service: Tracking a Trojan to Cambodia’s Scam Centers |
| 2026-04-09
⋅
Synaptic Security
⋅
Obfuscation Without Effort: Breaking a UAC-0226 GIFTEDCROOK Stealer GIFTEDCROOK |
| 2026-04-09
⋅
⋅
F6
⋅
Eastern Signature: Investigating a Cyberattack by an Asian Threat Group ShadowPad |
| 2026-04-08
⋅
Lookout
⋅
Beyond BITTER: MENA Civil Society Targeted in Hack-For-Hire Operation Linked to BITTER APT ProSpy |
| 2026-04-07
⋅
CISA
⋅
AA26-097A: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Cyber Av3ngers |
| 2026-04-07
⋅
Socket
⋅
North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads |
| 2026-04-07
⋅
NCSC UK
⋅
UK exposes Russian military intelligence hijacking vulnerable routers for cyber attacks |
| 2026-04-07
⋅
Talos Intelligence
⋅
New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations LucidKnight LucidPawn LucidRook UAT-10362 |
| 2026-04-07
⋅
Microsoft
⋅
SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks |
| 2026-04-07
⋅
IC3
⋅
AA26-097A: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure |
| 2026-04-07
⋅
NCSC UK
⋅
APT28 exploit routers to enable DNS hijacking operations |