Related Threat Clusters
-
MuddyWater Targets U.S. Entities Amid Geopolitical Tensions
In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
16 articles · Updated July 22, 2026 -
North Korean Hackers Utilize EtherHiding for Cryptocurrency Theft
The Google Threat Intelligence Group (GTIG) reports that North Korean threat actor UNC5342 has adopted a new technique called EtherHiding to deliver malware and facilitate cryptocurrency theft. This method embeds…
3 articles · Updated May 26, 2026 -
Webworm APT Expands Operations to Europe with New Backdoors
The China-aligned APT group Webworm has shifted its focus from Asia to Europe, targeting government organizations in Belgium, Italy, Poland, Serbia, and Spain during 2025. ESET researchers identified new backdoors,…
12 articles · Updated May 20, 2026 -
TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack
The TeamPCP threat group has expanded its supply chain attack campaign, compromising the Microsoft DurableTask Python client with versions v1.4.1, v1.4.2, and v1.4.3 found to contain a credential-stealing worm. This…
11 articles · Updated May 20, 2026 -
PATCHCORD Malware Targets Afghan Telecom and South Asian Infrastructure
Acronis Threat Research Unit has identified a new malware campaign named PATCHCORD, targeting Afghan telecom providers and critical infrastructure in South Asia. The malware, a custom backdoor written in C/C++, is…
10 articles · Updated August 13, 2026 -
North Korean ClickFake Campaign Targets Web3 Professionals with RATs
Researchers at SOCRadar have identified a new social engineering campaign by North Korea's Famous Chollima group, targeting Web3 and cryptocurrency professionals. The operation, dubbed ClickFake, employs fraudulent job…
2 articles · Updated July 22, 2026 -
Torg Grabber Malware Targets 728 Crypto Wallets with Advanced Techniques
Torg Grabber, a new infostealer malware, is actively targeting 728 cryptocurrency wallet extensions and other applications, including password managers and communication tools. The malware employs the ClickFix technique…
2 articles · Updated March 27, 2026 -
Bitdefender Alerts on APT36's New AI 'Vibeware' Targeting India
Bitdefender has reported a new AI-driven attack model termed 'vibeware', which generates numerous disposable malware variants. This tactic is linked to APT36 (Transparent Tribe), a Pakistan-aligned threat actor that has…
8 articles · Updated March 6, 2026 -
CrystalX RAT: New Malware Combines Data Theft and Prankware Features
In March 2026, cybersecurity researchers discovered CrystalX RAT, a new malware-as-a-service (MaaS) being promoted in private Telegram channels. This malware offers a wide range of capabilities, including remote access,…
10 articles · Updated April 1, 2026 -
Surge in Exploited CVEs and Malware Activity in H1 2026
In the first half of 2026, Insikt Group reported 215 actively exploited CVEs, marking a 34% increase from the previous year. Notably, AsyncRAT emerged as the leading malware, with nearly 60,000 unique hashes. The report…
2 articles · Updated September 4, 2026
Recent Intelligence Reports
- Recorded Future: 215 CVEs Exploited in H1 2026, AsyncRAT Leads Malware Data — Technadu · September 4, 2026
- Malwarebytes: Scammers are Tailoring Attacks to Specific Platforms, From Text Toll Scams ... — Appleworld.Today · September 3, 2026
- Australia arrests alleged TeamPCP hackers behind supply — Bleepingcomputer · August 27, 2026
- Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown — Infosecurity-Magazine · August 25, 2026
- ANPD Monitors 22 Social Networks and AI Apps for Deepfakes and Virtual Crimes — Ground.News · August 22, 2026
- Attackers use FTP banners to hide new E4del and PINHOLE RATs — Feeds.Feedburner · August 21, 2026
- Hackers abuse FTP server banners to deliver new Windows malware — Bleepingcomputer · August 21, 2026
- Bitdefender — www.bitdefender.com · August 13, 2026