T1071 - Application Layer Protocol

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector

GRU Compromises Home Routers in 23 States to Steal Outlook Credentials

BlueMoon Exploit Kit Targeting Chrome and Windows by Multiple State Actors

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

Operation Highland: Velvet Ant's Decade-Long Espionage Campaign

Gamaredon Exploits WinRAR Vulnerability in Ongoing Ukraine Campaign

GhostShell Malware Targets Ukraine's UAV and Defense Supply Chain

Operation Escaneo Targets Latin American Critical Infrastructure

DarkSword iOS Exploit Chain Targets Mobile Devices Globally

North Korean Hackers Deploy Mac Backdoors via Fake Job Tests Targeting IT Firms

China-Aligned Hackers Exploit Tencent's Sogou Flaw for Backdoor Deployment

TeamPCP's CanisterWorm Targets Iranian Systems with Destructive Kubernetes Wiper

Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

Critical Vulnerabilities in Yarbo Robot Firmware Expose Devices to Remote Attacks

Russian APT Exploits Zimbra XSS to Target Ukrainian Government

Zero-Click Spyware Delivered via Targeted Ads: Citizen Lab Report

Exploitation of WinRAR CVE-2025-8088 Threatens Ukrainian Organizations

Iranian State Actors Deploy CHOSEN BRICK Spyware Against Dissidents

Chinese APT CL-STA-1062 Deploys TinyRCT Backdoor Against Southeast Asian Targets

Jewelbug APT Group Engages in Espionage and Cryptocurrency Fraud

Russia's AI-Driven Cyber Espionage Targets Ukraine and Europe

APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign

NightEagle APT Targets Russian Enterprises with Advanced Malware

Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks

Lazarus Group Escalates Attacks with Fileless RemotePE Trojan Targeting Crypto and Banks

Operation TrueChaos: Exploitation of TrueConf Zero-Day Vulnerability

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

North Korean Hackers Target Open Source Software Supply Chain via npm Packages

FBI Alerts on Iranian Malware Campaign via Telegram Targeting Dissidents

UAT-7810 Expands Malware Arsenal to Enhance ORB Network

Bitget Suffers $388M Theft via Zero-Day Exploit

Cyclops Blink Malware Targets Cisco Firewall Devices

Kimsuky Exploits South Korean Groupware Vendors with New Gomir Variants

Belarus-Aligned Ghostwriter Group Targets Ukraine with Phishing Campaign

MuddyWater's Operation Olalampo Targets MENA Region with New Malware

APT36 Launches Operation RapidRust with New Rust Malware Tools

Tortoiseshell Expands Malware Arsenal with New Backdoor and SSH Tunneling Tool

Surge in Blockchain Dead Drops Driven by AI Models

Sandworm Targets Critical Infrastructure with Aggressive OT Attacks

Google and FBI Disrupt NetNut Proxy Network Linked to 2 Million Devices

Malicious NuGet Packages Target Chinese Developers, Steal Sensitive Data

Discover-Tech's AdFection Scheme Delivers Candiru Spyware via Ads

China-Linked Cyber Espionage Targets India's Tax Ecosystem

China-Nexus UAT-11587 Campaign Uses Antino Backdoor Across Asia

Israeli Ad Firm Doubled as Candiru's Zero-Click Spyware Delivery Channel

Darksword Variant Threat Research

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

ManageEngine's Threat Analysis Lab

Hooking Candiru Another Mercenary Spyware Vendor Comes Into Focus

Air Force personnel's use of infected USB drives led to major malware breach

January 2025

Cybercrime - Websites that look like casinos may be hiding illegal gambling, scams, and ...

Silent Lynx Hackers Leave Their Central Asian Spy Campaign Exposed

China-Linked Hackers Exploited BeyondTrust Zero

Kgb Rat Windows Fud Trojan

Mandiant attributes the attacks

Bitdefender

CVE-2026-102764: BeyondTrust Zero

Targeted ads delivered 0-click exploits to install mercenary malware

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email ...

AdFection Attack Hid Zero

Online ads infected targets with Candiru spyware in zero

Citizen Lab Traces Zero

Another Good Reason to Block Online Ads: They Can Deliver Spyware

Help Tds Malicious Plugins Redirect Tech Support Scams

Inside Help Tds Hotejka Cloudflare Pages And Predictive Detection

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

CikaBika Bot RAT Uses Discord for C&C

CikaBika Bot RAT Uses Discord for C&C

CISA to AI labs: Share test-network IPs to flag rogue agents

Hirudo Android Trojan Replaces Banking Apps to Steal Credentials

123 lures evaded every antivirus engine Opens a new window

ShadowSilk (Group-IB)

Fake WatchGuard VPN site steals credentials, then serves the genuine signed client

How a leaked builder of XWorm turned a remote access trojan into a surveillance kit

Netskope says

XWorm RAT Evolves Into Surveillance Platform

XWorm RAT Evolves Into Surveillance Platform

Government Warnings on Consumer Messaging App Attacks

WhatsApp Attachment Deploys Windows Malware With SYSTEM-Level Access

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

Canto Incognito Tracking The Poellm Malware

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Seoul National University Also Hit by 28 Hacking Incidents in Six Years... 1132 Pieces of ...

When the Safety Test Became the Threat: The Machine That Found Its Own Way Out