T1547 - Boot Or Logon Autostart Execution

Belarus-Aligned Ghostwriter Group Targets Ukraine with Phishing Campaign

UAT-7810 Expands Malware Arsenal to Enhance ORB Network

Supply Chain Attack Compromises Popular Rust Crates to Deliver Malware

Operation Double Barrel: State-Sponsored Exploitation of Korean Financial Software

China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware

Chinese APT Campaign Targets Asia-Pacific with FDMTP Backdoor

Cloud Atlas APT Group Exploits CVE-2018-0802 and Modifies termsrv.dll for RDP Access

Iranian Cyberespionage Targets Iraqi Government Officials

HoneyMyte APT Upgrades CoolClient Backdoor with Kernel Driver for Enhanced Stealth

SUNBURST Backdoor Exploits SolarWinds Supply Chain Vulnerability

China-nexus Threat Actor Deploys PlugX in Persian Gulf Amid Middle East Conflict

FishMonger Expands SprySOCKS Malware to Windows with Kernel-Level Stealth

FamousSparrow Deploys SparroWocky Backdoor in Latin America

Glassworm Malware Targets React Native npm Packages in Supply Chain Attack

Supply Chain Attack Compromises DAEMON Tools with Malicious Backdoor

HelloNet Campaign Targets Russian Government via ViPNet Software Exploitation

ComfyUI Servers Compromised for Cryptomining and Botnet Operations

Critical Cybersecurity Vulnerabilities in Contec and Epsimed Patient Monitors

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP

PhantomEnigma Campaign Hijacks Brazilian Gov Websites for Malware Delivery

New ChainScript RAT Exploits ClickFix Lures with Blockchain C2

Chinese State Hackers Target South American Telcos with Advanced Malware

Solana FakeFix Campaign Targets Developers with Malicious Packages

Massive Redis Cryptomining Botnet Compromises 3,562 Servers

VHDX Files Exploited to Deploy Remcos RAT via Multi-Stage Attack

Zbtlink Routers Found with Backdoor Named ENDLESSDOORS

Kyber Ransomware Targets Windows and VMware ESXi Systems

INJ3CTOR3 Targets FreePBX Systems with JOMANGY Webshell and VoIP Toll Fraud

Malicious fast-draft Open VSX Extension Distributes RAT and Infostealer

AI-Driven Botnet Migration by Russian Actor in Just Six Minutes

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

JDownloader Website Compromised to Distribute Malware to Users

Cybercriminals Exploit ChatGPT Custom GPTs for ClickFix RAT Attacks

Credential Sniffing Malware Disguised as Windows 11 Update Targets Users

Old UEFI Shims Exploit Bypass of Secure Boot Security

MiniPlasma Zero-Day Exploit Grants SYSTEM Access on Patched Windows Systems

ClingSTUN Linux Backdoor Exploits 24 IoT Vulnerabilities

Hanoi Police Warn of Dangerous Malware Strains Targeting Officials

Argamal Malware Campaign Targets Hentai Game Players Worldwide

Vidar Infostealer Targets SMBs with Malvertising Campaign

JanelaRAT Malware Campaign Targets Latin American Financial Sector

XCSSET Malware Targets macOS Developers Through Xcode Projects

SilabRAT Trojan Targets Cryptocurrency with Session Hijacking Techniques

Shift Browser Malware? Is It Safe and How to Remove - 2

Chatgpt Custom Gpts Clickfix Rat

Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries

MATCHBOIL Malware Adds Sandbox Checks, .NET Reactor Obfuscation and Persistent C2

Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift

Earth Sirrush Russia Aligned Intrusion Set 4 Years Evolving Espionage Tooling

Russian hackers hide spyware behind bizarre cat-feeding planner

Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware

What is MATCHBOIL? The Russia

ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure

Cling botnet exploits Realtek SDK flaw, uses STUN for C2 | brief

2CLoader: A New Malware Loader Delivering Vidar and Remus

Windows malware uses Grok AI to help stay hidden, researchers say

Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

The EDR blind spot: 3 ways browser attacks evade endpoint telemetry

Jewelbug Crypto Fraud Espionage

Defender Exclusion Abuse: How Attackers Hide Malware from MDAV

Hackers Exploit ChatGPT Custom GPTs In ClickFix Malware Attacks

Custom ChatGPTs push ClickFix attacks to deploy RAT malware

Hackers Use ChatGPT Custom GPTs in ClickFix Attacks

Silver Fox campaign against India documented by CloudSEK

Red Team Report Ai Powered Email Attacks

DarkMe RAT trades zero-days for plain phishing emails

TraderTraitor Backdoors Target DevOps Engineers

Operation Darkcasino In Depth Analysis Of Attacks By Apt Group Evilnum Part 2

ChainScript Node.js RAT Uses Blockchain C2

ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

PersistenceSniper exploit

Isolation

ESET Research: China-aligned FamousSparrow expands

Chinese hackers use SparroWocky malware in govt espionage attacks

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Iranian malware steals Telegram and WhatsApp data from targets

NCSC and Allies Warn of Iranian Spyware Campaign

Iran disguises spyware as MRI results to target dissidents

Iranian cyber spies used fake MRI scan results to hack 'enemy of regime'

Iranian Hackers Use Telegram

Thai Broadband Provider Hacked via Fortinet Vulnerability