Related Threat Clusters
-
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
MuddyWater Targets U.S. Entities Amid Geopolitical Tensions
In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
16 articles · Updated July 22, 2026 -
Tortoiseshell Expands Malware Arsenal with New Backdoor and SSH Tunneling Tool
The Iranian-linked Tortoiseshell APT group has expanded its malware toolkit, introducing a new backdoor and reverse SSH tunneling utility. Group-IB Threat Intelligence identified these developments following a report by…
6 articles · Updated August 26, 2026 -
Ukrainian Magura V3 Drone Found Off Lefkada with Explosives
A Ukrainian-designed Magura V3 naval drone was discovered by fishermen off the coast of Lefkada, Greece, on May 8, 2026. The drone, which had its engine still running, was retrieved from a coastal cave and is believed…
13 articles · Updated May 8, 2026 -
Handala Hackers Launch Destructive Cyberattacks Using RDP and NetBird
Handala Hack, an Iranian state-linked threat actor, has executed a series of destructive cyberattacks targeting organizations in Israel, Albania, and the United States. The attacks utilize Remote Desktop Protocol (RDP)…
2 articles · Updated March 17, 2026 -
Joint Coalition Condemns Iran's Hostile Operations Abroad
A coalition of 22 countries, including the US, UK, and New Zealand, condemned Iran for orchestrating a series of lethal plots involving killings, kidnappings, and intimidation against dissidents and Jewish communities…
5 articles · Updated June 10, 2026 -
Rapid Exploitation of Vulnerabilities in 2025: Insights from Cisco Talos
In 2025, Cisco's Talos reported a significant increase in the speed at which cybercriminals exploit vulnerabilities, particularly highlighting the React2Shell vulnerability disclosed in December 2025, which became the…
8 articles · Updated March 23, 2026 -
NATO Reinforces Eastern Flank Amid Rising Security Threats from Russia
NATO has significantly enhanced its deterrence and defense posture along its eastern flank in response to Russia's aggressive actions, including the annexation of Crimea in 2014 and the invasion of Ukraine in 2022. The…
2 articles · Updated June 4, 2026 -
Russia Issues Threats Against Diplomatic Missions in Kyiv Amid Escalating Tensions
Russia has escalated threats against foreign embassies in Kyiv, warning of potential strikes on diplomatic missions. This follows a series of statements from Russian officials, including Dmitry Medvedev, suggesting that…
6 articles · Updated May 28, 2026 -
Iran-Linked Hackers Target Albanian Parliament in Cyberattack
Iran-linked hackers have claimed responsibility for a cyberattack on the Albanian parliament, reportedly breaching email systems amid escalating cyber tensions. This incident highlights the ongoing geopolitical strife…
5 articles · Updated March 10, 2026
Recent Intelligence Reports
- Tortoiseshell: New Toolset and Operational Infrastructure Exposed | Group — Group-Ib · August 26, 2026
- Opinion: Thoughts En Route to Albania — Kyivpost · July 25, 2026
- Opinion: Thoughts En Route to Albania — Kyivpost · July 25, 2026
- ta458 roundpress exploits — Proofpoint · July 23, 2026
- Google Cloud Threat Intelligence — cloud.google.com · July 23, 2026
- Industrial Defender Partners with COMPUTER 2000 Bulgaria to Expand OT Cybersecurity ... — Morningstar · July 9, 2026
- Industrial Defender Partners with COMPUTER 2000 Bulgaria to Expand OT Cybersecurity ... — Prnewswire · July 9, 2026
- Over 5,800 arrests, USD 293 million intercepted in global fraud bust — Interpol.Int · July 9, 2026