Related Threat Clusters
-
North Korean PurpleDelta Network Exploits Remote Hiring for Fraudulent Employment
Insikt Group has identified PurpleDelta, a North Korean IT worker network, employing over 22 fabricated personas to apply for jobs at more than 1,100 companies, likely securing positions at ten or more organizations.…
3 articles · Updated August 19, 2026 -
Global Takedown of Tycoon2FA Phishing Service Disrupts Major Cybercrime Operation
A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale…
59 articles · Updated March 5, 2026 -
Google Ads Phishing Campaign Targets GoDaddy ManageWP Users
A phishing campaign exploiting Google Ads is targeting users of GoDaddy's ManageWP platform, which is used for managing multiple WordPress sites. The attackers employ an adversary-in-the-middle (AiTM) technique,…
3 articles · Updated May 7, 2026 -
Ex-IT Employee Sentenced for Sabotaging Iowa School District Systems
Ezekiel Dean Potter, a former IT worker at Saydel Community School District, was sentenced to 21 months in prison for a series of cyberattacks against the district after his termination in April 2023. Over 21 months, he…
3 articles · Updated June 13, 2026 -
GoDaddy Transfers 27-Year Domain Without Authorization, Causing Major Downtime
GoDaddy is investigating allegations that it transferred a 27-year-old domain, HELPNETWORKINC.ORG, from a client’s account to another user without proper authentication or documentation. The transfer occurred on April…
2 articles · Updated April 29, 2026 -
Surge in Calendar Phishing Attacks Targeting Google and Microsoft Users
Sublime Security has reported a significant increase in phishing attacks utilizing calendar invites, specifically targeting users of Google Workspace and Microsoft 365. These attacks exploit social engineering tactics…
2 articles · Updated November 11, 2025 -
Over 10,000 Linux Servers Infected by SystemBC Botnet Variant
A new Linux variant of the SystemBC remote access trojan has infected over 10,000 IP addresses worldwide, primarily targeting web servers. Discovered by Silent Push, the compromised servers include those hosting…
6 articles · Updated February 4, 2026 -
New Data Security Program and Regulatory Changes in Cybersecurity for 2026
In 2025, the Department of Justice implemented the 'Data Security Program,' establishing a bulk data transfer rule that restricts the transfer of sensitive US personal data to certain countries. This initiative, along…
3 articles · Updated February 9, 2026 -
Surge in Calendar Phishing Attacks Targeting Google and Microsoft Users
Sublime Security reported a significant increase in phishing attacks using calendar invites to bypass security measures. These attacks primarily target users of Google Workspace and Microsoft 365, leveraging social…
2 articles · Updated November 11, 2025
Recent Intelligence Reports
- PurpleDelta's Fraudulent Employment Operations — Recordedfuture · August 18, 2026
- Ex — Bleepingcomputer · June 13, 2026
- Fired IT worker jailed for 21 months after sabotaging old school district — Theregister · June 12, 2026
- Hackers Abuse Google Ads to Steal Users GoDaddy ManageWP login Credentials — Cybersecuritynews · May 7, 2026
- GoDaddy customer claims registrar transferred 27-year — Theregister · April 29, 2026
- GoDaddy Gave a Domain to a Stranger Without Any Documentation — News.Ycombinator · April 26, 2026
- Europol Dismantles Tycoon 2FA: Inside the Takedown of a 64,000-Attack Phishing-as — Rescana · March 5, 2026
- Tycoon 2FA Takedown — Cloudflare · March 4, 2026