Related Threat Clusters
-
ScarCruft's Supply-Chain Attack Targets Yanbian Gaming Platform with BirdCall Malware
ESET researchers reported a supply-chain attack by the North Korean APT group ScarCruft, targeting a gaming platform in the Yanbian region of China. The attack, ongoing since late 2024, involved trojanizing both Windows…
10 articles · Updated May 5, 2026 -
APT37 Hackers Deploy Custom Malware Against Air-Gapped Systems
North Korean threat group APT37 has initiated a campaign named Ruby Jumper, utilizing new custom malware to target air-gapped systems, which are typically isolated from the internet. This marks a significant advancement…
10 articles · Updated February 27, 2026 -
Chollima APT Targets Activists with LNK File Malware in Operation: ToyBox Story
The Ricochet Chollima APT group has initiated a campaign against activists and organizations focused on North Korea, starting in March 2025. This operation, dubbed 'Operation: ToyBox Story,' employs social engineering…
4 articles · Updated February 3, 2026 -
Paris Prosecutors Raid X Offices Over Grok AI Investigation
On February 3, 2026, Paris prosecutors raided the French offices of Elon Musk's X as part of a criminal investigation into the platform's Grok AI tool, which is alleged to have generated illegal content, including…
14 articles · Updated February 3, 2026
Recent Intelligence Reports
- North Korean APT Targets Yanbian Gamers via Trojanized Platform — Infosecurity-Magazine · May 5, 2026
- APT37 hackers use new malware to breach air — Bleepingcomputer · February 27, 2026
- French Authorities Raid X Office Following Cybercrime Allegations — Cybersecuritynews · February 3, 2026
- Chollima Hackers Abuse LNK Files In Sophisticated Malware Campaign — Cyberpress · February 3, 2026
- Chollima APT Hackers Weaponize LNK File to Deploy Sophisticated Malware — Cybersecuritynews · February 3, 2026