Related Threat Clusters
-
Akira Ransomware Group Targets Critical Infrastructure, Extracts $42 Million
The Akira ransomware group has been identified as a significant threat to critical infrastructure, with the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warning of its active ransomware…
9 articles · Updated November 14, 2025 -
Apple Alerts Users of Targeted Mercenary Spyware Attacks in 110 Countries
On August 13, 2026, Apple issued threat notifications to users in 110 countries, warning them of potential mercenary spyware attacks targeting their iPhones, iPads, or Macs. This marks a significant update in Apple's…
102 articles · Updated August 13, 2026 -
Operation Endgame Disrupts Evil Corp's SocGholish Malware Network
On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…
67 articles · Updated June 18, 2026 -
Kimsuky Expands AI Capabilities for Cyberattacks
The North Korean hacking group Kimsuky has developed local AI tools to enhance its cyberattack capabilities, as reported by Genians Security Center on August 10, 2026. The group is utilizing large language models (LLMs)…
49 articles · Updated August 10, 2026 -
17 Iranians Charged in Cyber Theft Campaign Targeting U.S. Institutions
The U.S. Department of Justice has unsealed a superseding indictment against 17 Iranian nationals linked to the Mabna Institute, alleging a coordinated cyber theft campaign on behalf of Iran's Islamic Revolutionary…
55 articles · Updated August 18, 2026 -
Crypto Theft Surge: $2.87 Billion Stolen in 2025 Amid Evolving Threat Landscape
In 2025, cryptocurrency thefts have surged significantly, with over $2 billion stolen in just the first half of the year, marking a 17.27% increase compared to 2022. The ByBit hack, attributed to North Korean state…
3 articles · Updated May 15, 2026 -
Kimsuky Exploits South Korean Groupware Vendors with New Gomir Variants
The Kimsuky group, linked to North Korea, targeted South Korean groupware vendors from late 2025 to early 2026, deploying new malware variants BirdTroy and DriveTroy. These Linux backdoors utilized Google Drive for…
4 articles · Updated July 24, 2026 -
Tortoiseshell Expands Malware Arsenal with New Backdoor and SSH Tunneling Tool
The Iranian-linked Tortoiseshell APT group has expanded its malware toolkit, introducing a new backdoor and reverse SSH tunneling utility. Group-IB Threat Intelligence identified these developments following a report by…
6 articles · Updated August 26, 2026 -
State-Sponsored Actors Target Network Edge Devices Amid Rising Exploits
Recent reports indicate a significant rise in the exploitation of edge devices, such as VPN gateways and firewalls, by state-sponsored actors. These devices have become the primary attack vector for espionage…
3 articles · Updated July 22, 2026 -
Russia Exploits Japan for Espionage and Military Technology Acquisition
Russia has established a network in Japan to acquire advanced technology for its military operations, particularly in the Ukraine conflict. This network is reportedly led by a GRU unit, the 20th Directorate, which…
10 articles · Updated July 12, 2026
Recent Intelligence Reports
- AI Is a Threat to Global Financial Stability: BoE Chief Andrew Bailey — Businessinsider · August 31, 2026
- Japan approves mass production of 3D-printed interceptor drones — Defensenews · August 27, 2026
- Japan fast-tracks anti-drone system amid China's military build — Scmp · August 27, 2026
- Taiwan charges nine people for smuggling 'high-end' AI servers to China — Theguardian · August 27, 2026
- Qilin gang claims US Bureau of Alcohol, Tobacco, Firearms and Explosives — Cybernews · August 26, 2026
- Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel — Infosecurity-Magazine · August 26, 2026
- Interpol's Jackal IV Disrupts West African Crime Infrastructure — Darkreading · August 26, 2026
- Interpol arrest suspected black axe scammers, identify hundreds for cyber crimes across West Africa — Bbc · August 26, 2026