Related Threat Clusters
-
UK Retail Cyber Attacks Show No Seasonal Spike Amid Holiday Concerns
Analysis of cybersecurity incidents in the UK retail and manufacturing sectors reveals that 1,381 breaches occurred between Q3 2024 and Q2 2025, with no significant concentration around major shopping events. Security…
61 articles · Updated November 28, 2025 -
LummaStealer Infections Rise Following CastleLoader Campaigns
LummaStealer infections have surged due to social engineering campaigns utilizing the ClickFix technique to distribute CastleLoader malware. This infostealer, operating as a malware-as-a-service platform, had previously…
7 articles · Updated February 11, 2026 -
TA584 Expands Operations with Tsundere Bot via ClickFix Social Engineering
The cybercriminal group TA584 has intensified its operations by deploying Tsundere Bot malware through ClickFix social engineering tactics. This initial access broker has significantly increased its campaign volume,…
5 articles · Updated January 29, 2026 -
Operation Endgame 3.0 Disrupts Major Malware Networks
Europol and law enforcement agencies from 11 countries executed Operation Endgame 3.0 from November 10 to 13, 2025, dismantling the infrastructure of three major malware operations: Rhadamanthys, VenomRAT, and Elysium.…
20 articles · Updated November 24, 2025 -
TA584 Cybercriminal Group Intensifies Email Attacks in 2025
Proofpoint reported a significant increase in activity from the cybercriminal group TA584 in 2025. The group is linked to initial access brokering and follow-on attacks, including ransomware and data theft, utilizing…
2 articles · Updated January 30, 2026 -
Cyber Monday 2025: Surge in Online Scams Targeting Shoppers
As Cyber Monday approaches, online shoppers are facing increased risks from cybercriminals exploiting the surge in digital purchases. Security experts warn of fraudulent websites, phishing emails, and insecure payment…
7 articles · Updated November 21, 2025
Recent Intelligence Reports
- LummaStealer infections surge after CastleLoader malware campaigns — Bleepingcomputer · February 11, 2026
- Proofpoint details TA584's fast-evolving 2025 attacks — Securitybrief.Au · January 30, 2026
- Proofpoint details TA584's fast-evolving 2025 attacks — Itbrief · January 30, 2026
- Initial access hackers switch to Tsundere Bot for ransomware attacks — Bleepingcomputer · January 28, 2026
- From Amazon to Louis Vuitton: How Darktrace Detects Black Friday Phishing Attacks — Darktrace · November 27, 2025
- Operation Endgame Dismantles 1,025 Malware Servers — Esecurityplanet · November 13, 2025