Aurora is a technology platform tracked across 3 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed November 19, 2025; most recent activity May 19, 2026.
On May 19, 2026, Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) operation that provided over 1,000 fraudulent code-signing certificates to cybercriminals, enabling them to disguise malware as…
Ransomware actors are increasingly focusing on cloud-based assets, particularly in AWS environments. This shift involves utilizing various tactics to compromise critical business data, moving away from traditional…
Ransomware actors are increasingly focusing on cloud-based assets, particularly Amazon Web Services (AWS) S3 buckets. Recent reports indicate that these groups are adapting their tactics to leverage cloud-native…