Click here to download all references as Bib-File.•
| 2026-10-01
⋅
Symantec
⋅
Warlock Ransomware Attackers Hit Water and Telecom Operators WarLock Storm-2603 |
| 2026-10-01
⋅
Proofpoint
⋅
Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles Evilginx TA419 |
| 2026-09-30
⋅
Sophos
⋅
TerminalFix and Lorem Ipsum Loader enable covert tunneling Lorem Ipsum |
| 2026-09-17
⋅
Chainalysis
⋅
DPRK and Iran are Leading a 5.2x Surge YoY in Blockchain-Assisted Cyberattacks |
| 2026-09-07
⋅
Kudelski Security
⋅
Beyond Lazarus: Organization of DPRK Cyber Capabilities Qilin KillDisk Maui Ransomware PLAY SiennaBlue SiennaPurple WannaCryptor |
| 2026-09-07
⋅
Sekoia
⋅
Beyond Lazarus: Organization of DPRK cyber capabilities Qilin KillDisk Maui Ransomware PLAY SiennaBlue SiennaPurple WannaCryptor |
| 2026-09-02
⋅
Malware INFO
⋅
Fake GlobalProtect MSI Targets Myanmar Using Cloudflare and Google Sheets as C2 Unidentified 126 (GoogleSheets C2) |
| 2026-08-27
⋅
Proofpoint
⋅
Carry-On Compromise: TA4922 Packs PackClient donut_injector |
| 2026-08-21
⋅
Bitso Quetzal Team
⋅
North Korea’s Crypt: Hunting Ghosts StoatWaffle |
| 2026-08-12
⋅
Certainity
⋅
Inside a Zawoo Team Intrusion ZaWoo |
| 2026-08-10
⋅
sonatype
⋅
Six npm Packages Use Ethereum Transactions to Retrieve Malicious Payloads JADESNOW |
| 2026-07-29
⋅
SafeDep
⋅
Joyfill npm Packages Compromised with Blockchain C2 Loader JADESNOW |
| 2026-07-28
⋅
Socket
⋅
Two Joyfill npm Beta Releases Compromised to Deliver DEV#POPPER Remote Access Trojan JADESNOW |
| 2026-07-15
⋅
Symantec
⋅
Daxin Returns: Stealthy Malware Resurfaces in Taiwan Alongside a New Backdoor Daxin |
| 2026-07-07
⋅
Proofpoint
⋅
One Email Closer to the Edge: UNK_MassTraction & the Physics of Exploitation IceCube |
| 2026-07-02
⋅
FBI
⋅
Cyber Criminal Group TeamPCP Shai-Hulud TeamPCP |
| 2026-06-25
⋅
Microsoft Security
⋅
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access TonRAT |
| 2026-06-17
⋅
Microsoft
⋅
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet |
| 2026-06-10
⋅
TEAMT5
⋅
CVE-2026-34197:Apache ActiveMQ SoxAgent SLIME88 |
| 2026-06-09
⋅
Zscaler
⋅
Technical Analysis of MLTBackdoor MLTBackdoor |