Related Threat Clusters
-
Sandworm Launches Wiper Malware Campaign Against Ukrainian Organizations
The Russian state-backed hacking group Sandworm has intensified its operations against Ukrainian organizations by deploying data-wiping malware. This campaign targets critical sectors, including the grain industry, and…
6 articles · Updated November 7, 2025 -
Gamaredon Exploits WinRAR Vulnerability in Ongoing Ukraine Campaign
Gamaredon, a Russian state-backed APT group, is actively exploiting a WinRAR vulnerability (CVE-2025-8088) to deploy malware against Ukrainian government and military targets. The attack begins with a spearphishing…
7 articles · Updated June 2, 2026 -
Exploitation of WinRAR CVE-2025-8088 Threatens Ukrainian Organizations
Two Russia-aligned cyber campaigns are exploiting the WinRAR vulnerability CVE-2025-8088 against Ukrainian targets nearly a year after it was patched. The flaw, a path traversal vulnerability, allows attackers to write…
19 articles · Updated June 8, 2026 -
Gamaredon APT Escalates Cyber Operations Against Ukraine in 2025
The Gamaredon group, a Russian-aligned APT, has significantly upgraded its cyber capabilities in 2025, focusing on spear-phishing campaigns against Ukrainian targets. ESET Research reports that Gamaredon conducted 35…
7 articles · Updated June 25, 2026 -
Malaysia's Cyber Threat Landscape Faces Significant Transformation Amid Digital Expansion
Malaysia's cyber threat landscape is experiencing a structural shift due to rapid digital growth and geopolitical factors, making it a prime target for cyber attacks. A report from Cyfirma indicates that state-backed…
2 articles · Updated April 8, 2026 -
Sandworm Hackers Target Ukraine's Grain Sector with Data-Wiping Malware
The Russian state-backed hacker group Sandworm has launched a campaign using data-wiping malware against Ukrainian organizations, particularly focusing on the grain sector. This attack aims to disrupt critical…
9 articles · Updated November 8, 2025 -
Surge in Russian Cyber Attacks Targeting Ukraine and Europe
ESET Research reports a significant increase in Russian cyber attacks, particularly from the Gamaredon and Sandworm groups, which have utilized spearphishing as their primary attack method. Additionally, the Lazarus…
2 articles · Updated November 6, 2025 -
Councils Urged to Prepare for Cyber Attacks Following Western Isles Incident
Councils have been warned of the urgent need to prepare for cyber attacks after a significant incident at Western Isles Council in November 2023. The Accounts Commission emphasized that councils should adopt a…
66 articles · Updated November 27, 2025 -
Exploitation of WinRAR Path Traversal Flaw Continues Amid CISA Warning
The CVE-2025-8088 vulnerability in WinRAR is being exploited by various threat actors for initial access and to deploy malware. The flaw allows attackers to use Alternate Data Streams to write malicious files to…
12 articles · Updated January 27, 2026 -
Russia and North Korea Collaborate in Cyber Operations
Research indicates that Russian APT group Gamaredon and North Korean Lazarus Group are collaborating by sharing operational infrastructure. This partnership marks a significant development in state-sponsored cyber…
4 articles · Updated November 26, 2025
Recent Intelligence Reports
- Gamaredon 2025 Leveraging Tunnels Workers Dead Drops New Alliances — www.welivesecurity.com · June 30, 2026
- Russian APT 'Gamaredon' Upgrades Its Arsenal, Requiring New Defenses — Darkreading · June 25, 2026
- ESET Research investigates Russian-aligned Gamaredon group — Markets.Businessinsider · June 25, 2026
- Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open — Trendmicro · June 9, 2026
- Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open — Trendmicro · June 8, 2026
- Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open — Trendmicro · June 8, 2026
- Gamaredon Uses GammaPhish and GammaWorm in Ukraine — Socprime · June 2, 2026
- Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine — Thehackernews · June 2, 2026