Related Threat Clusters
-
Attackers Exploit WDigest Vulnerability to Harvest Plaintext Credentials
A multi-stage cyber attack targeted IIS servers, beginning with enumeration commands and escalating to credential extraction using Mimikatz. The attackers uploaded a steganographic webshell and executed a…
3 articles · Updated July 2, 2026 -
JetBrains Patches Critical Authentication Bypass and Account Takeover Vulnerabilities
JetBrains has issued patches for critical vulnerabilities in JetBrains Hub that could lead to full authentication bypass, account takeover, and privilege escalation. The vulnerabilities, tracked as CVE-2026-56141,…
37 articles · Updated July 2, 2026 -
Ousaban Banking Trojan Targets Users in Spain and Portugal with Advanced Techniques
The Ousaban banking trojan has been identified targeting Windows users in Spain and Portugal since May 2026. This malware employs phishing PDFs disguised as corrupted files to lure victims into clicking an 'Atualizar'…
8 articles · Updated July 1, 2026 -
Emergence of BraZetsu Malware: AI-Enhanced Threat from Exilware
Group-IB has identified BraZetsu, a sophisticated Python-based Windows malware attributed to the Brazilian threat actor Exilware. This malware framework serves as a master toolkit for Initial Access Brokers (IABs),…
2 articles · Updated September 1, 2026
Recent Intelligence Reports
- Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem | Group — Group-Ib · August 31, 2026
- According to FortiGuard Labs — www.fortinet.com · July 3, 2026
- JetBrains Patches Critical Hub Authentication Bypass and Account Takeover Vulnerabilities — Gbhackers · July 2, 2026
- Attackers Downgrade WDigest Protection to Dump Plaintext Credentials With Mimikatz — Gbhackers · July 2, 2026
- Ousaban banking trojan targets Spain and Portugal with new stealth techniques — Feeds.Feedburner · July 1, 2026
- A Brazilian banking trojan is targeting Santander and BBVA customers with fake PDF lures — Thenextweb · July 1, 2026
- Brazilian Banking Trojan Ousaban Targets Spain and Portugal — Infosecurity-Magazine · July 1, 2026