Related Threat Clusters
-
MuddyWater Targets U.S. Entities Amid Geopolitical Tensions
In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
16 articles · Updated July 22, 2026 -
Coordinated Cyberattack Disrupts Water Utilities in Minnesota
A coordinated cyberattack affected water utilities in over 30 Minnesota communities on July 26 and 27, 2026. Key cities impacted include Plymouth, South St. Paul, Braham, and Maple Plain. The attack targeted…
324 articles · Updated July 27, 2026 -
Tortoiseshell Expands Malware Arsenal with New Backdoor and SSH Tunneling Tool
The Iranian-linked Tortoiseshell APT group has expanded its malware toolkit, introducing a new backdoor and reverse SSH tunneling utility. Group-IB Threat Intelligence identified these developments following a report by…
6 articles · Updated August 26, 2026 -
SHEETCREEP Espionage Campaign Uses UAE-India Lure for RAT Deployment
The SHEETCREEP espionage campaign employs a UAE-India diplomatic-themed ISO file to deliver a C# remote access trojan (RAT) via Google Sheets as its command-and-control channel. The ISO file, named…
4 articles · Updated June 12, 2026 -
Iranian Cyberespionage Targets Iraqi Government Officials
In 2024, Iranian APT group BladedFeline launched a cyber campaign against Kurdish and Iraqi government officials, utilizing advanced malware tools including the Shahmaran backdoor and the Whisper backdoor. The attacks…
2 articles · Updated May 13, 2026 -
HoneyMyte APT Upgrades CoolClient Backdoor with Kernel Driver for Enhanced Stealth
The HoneyMyte APT group has deployed an upgraded variant of the CoolClient backdoor in cyber-espionage campaigns targeting organizations in Myanmar, Mongolia, Pakistan, India, and Russia. This new variant introduces a…
10 articles · Updated August 14, 2026 -
Mirage Kitten Malware Targets Middle East and Africa with New Toolset
The Mirage Kitten APT group has deployed a sophisticated malware suite, including the NightLedger backdoor, across the Middle East and Africa. This campaign has successfully infiltrated sensitive sectors such as…
2 articles · Updated July 30, 2026 -
FishMonger Expands SprySOCKS Malware to Windows with Kernel-Level Stealth
ESET researchers have identified two new Windows variants of the SprySOCKS backdoor, previously exclusive to Linux, attributed to the Chinese cyberespionage group FishMonger. The variants, labeled WIN_DRV and WIN_PLUS,…
12 articles · Updated June 16, 2026 -
Cross-Border Disinformation Campaign Disrupts CJP Protests in India
Maharashtra Cyber Police identified over 500 social media profiles linked to a coordinated disinformation campaign during the Cockroach Janata Party (CJP) protests. The campaign, primarily operated from Pakistan and the…
8 articles · Updated July 28, 2026 -
Europe's Electricity Infrastructure Under Siege from Hybrid Warfare
European electricity infrastructure is increasingly targeted by hybrid warfare, with a report from Eurelectric revealing that most utilities are unprepared. The report highlights a surge in physical sabotage,…
4 articles · Updated April 1, 2026
Recent Intelligence Reports
- New J&K terror tactic: Pornography apps, Tor network used for secret messaging — Dailypioneer · August 31, 2026
- Punjab Police Unearths Intelligence Agency's Espionage Network, Suspect Arrested in Ludhiana — Punjabnewsline · August 30, 2026
- Terror handlers turn to porn sites to evade surveillance in J-K — M.Rediff · August 30, 2026
- Punjab Police foil espionage bid in Ludhiana, 1 held — Tribuneindia · August 29, 2026
- Couple in cop net for running ISI-backed espionage module — Millenniumpost.In · August 28, 2026
- Delhi Police Special Cell busts ISI-backed Pakistan espionage module, arrests couple — Aninews.In · August 28, 2026
- Delhi Couple Arrested for Allegedly Aiding ISI Espionage Ring — Indianewsnetwork · August 28, 2026
- Delhi Police arrest couple for espionage for Pakistan; were tasked with surveys of ... — Tribuneindia · August 28, 2026