T1071.001 - Web Protocols

Chinese APT VerdantBamboo Exploits Brickstorm Malware for Long-term Network Access

Chinese APT Campaign Targets Asia-Pacific with FDMTP Backdoor

SHEETCREEP Espionage Campaign Uses UAE-India Lure for RAT Deployment

Mirage Kitten Malware Targets Middle East and Africa with New Toolset

SUNBURST Backdoor Exploits SolarWinds Supply Chain Vulnerability

Human Attacker Exploits Marimo RCE at Machine Speed

Rapid Exploitation of Vulnerabilities in 2025: Insights from Cisco Talos

ComfyUI Servers Compromised for Cryptomining and Botnet Operations

Microsoft Word Vulnerability CVE-2026-21514 Exposes Millions to Malware Attacks

Funnel Builder Plugin Vulnerability Exploited in WooCommerce Attacks

PowMix Botnet Targets Czech Organizations with Malicious LNK Files

North Korean PurpleDelta Network Exploits Remote Hiring for Fraudulent Employment

Cybersecurity Spending Surges Amid Rising AI Threats and Regulatory Pressures

Mustang Panda Espionage Campaigns Target India's Government and Energy Sectors

New ChainScript RAT Exploits ClickFix Lures with Blockchain C2

SectopRAT Variant Exploits Legitimate Software for Remote Control Attacks

Armored Likho Expands Cyber-Espionage with New Rust Toolkit

New Infostealer Malware Targets Cobra DocGuard Users

Atomic macOS Stealer (AMOS) Targets Credentials via Malicious Terminal Commands

Kimwolf Botnet v7 Enhances DDoS Tactics Using Chrome Fingerprints and Ethereum

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

AI-Driven Cyber Attack Exposed by American Student

ACR Stealer Campaigns Exploit ClickFix and Steganography to Target Enterprises

AI-Driven Malware Framework Automates EDR Evasion Tactics

OpenWebUI Servers Hijacked for Crypto Mining and Data Theft

OceanLotus Campaign Distributes ZiChatBot Malware via PyPI Packages

Dropping Elephant Malware Campaign Utilizes China-Themed Loader Chain

SloppyRAT: New Remote Access Trojan Fuels Ransomware Operations

148 Malicious npm Packages Convert Browsers into DDoS Botnet

Malicious Joyfill npm Packages Distribute DEV#POPPER RAT and Credential Stealer

Microsoft Teams Exploited for Helpdesk Impersonation Attacks

New BPFDoor Malware Variants Target Telecom Networks

RoadK1ll Malware Turns Compromised Hosts into Network Relay Points

Operation PhantomCLR: Advanced AppDomain Hijacking Targets Financial Sectors

Emerging Cyber Threats: CRPx0 Ransomware and TeamPCP Supply Chain Attacks

Millenium RAT 4.* Enhances Stealth with Base64 and XOR Encryption

GhostSocks Malware: A Growing Threat Utilizing Residential Proxies

Multiple Mythic C2 Interfaces Exposed on Port 7443

Deno-Based RAT Leveraging Teams Impersonation Targets Employees

Hola VPN Exploitation Leads to Malware and Cryptomining Activities

VENON Malware Targets 33 Brazilian Banks with Rust-Based Attack

PavinLoader Malware Exploits ClickFix and Fake Downloads to Deploy Amatera Stealer

NeedyMantis Malware Framework Targeting Telecommunications and Government Entities

Emerging Threat: Kiss Loader Malware Exploits Early Bird APC Injection

Securelist.com

Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries

AI

Fake WatchGuard VPN Site Steals Credentials

According to

Earth Sirrush Russia Aligned Intrusion Set 4 Years Evolving Espionage Tooling

ASOS Snowflake Cloud Breach: Cybersecurity Incident Analysis of Push Notification Extortion Attack

ScreenConnect Client Abused for Remote Access

Active Exploitation Alert: China-Nexus UAT-11587 Deploys Antino Backdoor Leveraging Microsoft 365 Outlook and OneDrive for Stealthy Cyber-Espionage in Asia and Middle East

Antino Backdoor Lets China-Linked UAT

NeedyMantis: Unpacking a post

Microsoft Details NeedyMantis Post

Malicious Npm Package In Baileys Fork Skyzopedia Case

SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data

New ClosedQuorum Windows malware uses AI for attack decisions

venom exploit

ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers

Exvicy A Copycat Of The Errtraffic Malware Distribution Framework

ChainScript: the RAT that hides its command server inside a blockchain contract

Bug Bounty Hunter Allegedly Used AI-Built Malware to Create His Own Bounty Opportunities

Rapuncel Infostealer Killed 145 Security Tools Before Stealing Browser and Wallet Credentials

PSRansom exploit

RatHat Turns Android Accessibility Into an Attack Weapon

Operation RapidRust: APT36 Expands Rust Malware Toolkit

New SparroWocky backdoor deployed in attacks on governments

UK, US and Netherlands warn over Iranian state spyware campaign

Red Heron exploits Gitea RCE flaw in multinational campaign targeting industrial and ...

Malware Asal Indonesia Mantax Otax Bisa Intip Chat WhatsApp Dan Curi OTP

Macsync Stealer C2 Infrastructure Rotation

Hunting Macsync Stealer Infrastructure Through Behavioral Pivots

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service

SloppyRAT Malware Uses Advanced Evasion to Aid Ransomware Attacks

Machine speed, hold the AI: Hand-rolled marimo CVE-2026

SloppyRAT: A New Tool For Ransomware Attacks | ThreatLabz - Zscaler, Inc.

ClickFix moves into the browser: Cryptocurrency theft with Google

PEEP Malware: Chrome Extension Hijacks Browsers, Steals Data