Gallium is a apt_group tracked across 6 threat clusters and 12 intelligence report mentions on ThreatCluster. First observed February 25, 2026; most recent activity June 3, 2026.
FamousSparrow, a China-aligned APT group, launched a multi-wave cyberespionage campaign against an Azerbaijani oil and gas company from late December 2025 to February 2026. The attackers employed an evolved DLL…
Adversaries are increasingly leveraging external remote services like VPNs and Citrix to gain unauthorized access to networks. These attacks often involve using valid accounts obtained through credential harvesting or…
A mass cyber-espionage campaign targeting iPhone users in Ukraine and China has emerged, utilizing the Coruna exploit kit, developed by U.S. military contractor L3Harris' Trenchant division. The toolkit, comprising 23…
Recent reports detail the tactics employed by various cyber adversaries to enumerate files and directories on compromised systems. Adversaries utilize command shell utilities and custom tools to gather sensitive…
Google has disrupted the operations of a Chinese-linked hacking group known as UNC2814, which had breached at least 53 organizations across 42 countries. The company reported the incident on February 25, 2026, detailing…
The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors,…