Session — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
12
occurrences
First Seen
January 14, 2026
Last Seen
August 10, 2026

Related Threat Clusters

  • NCB Dismantles Darknet Drug Network 'Team Kalki' in Major Operation

    The Narcotics Control Bureau (NCB) has arrested two individuals linked to 'Team Kalki', a darknet drug trafficking network that has allegedly shipped over 1,000 parcels across India since January 2025. The operation…

    11 articles · Updated March 8, 2026
  • Icarus Group Exploits Klue OAuth Breach to Steal Salesforce Data

    In June 2026, a significant security incident involving Klue, a market intelligence platform, allowed the Icarus threat actor group to exfiltrate Salesforce CRM data from multiple organizations, including Huntress. The…

    80 articles · Updated June 18, 2026
  • Ransomware Tactics Evolve: EDR Killers Expand Beyond Vulnerable Drivers

    Recent research from ESET reveals that ransomware attackers are increasingly using EDR killers to disable endpoint detection and response (EDR) systems before launching their encryptors. These tools have become standard…

    18 articles · Updated March 19, 2026
  • DeadLock Ransomware Utilizes Decentralized Recovery Infrastructure

    DeadLock ransomware has emerged as a significant threat, employing a decentralized recovery chat that integrates the Polygon blockchain and the Session messenger. This ransomware utilizes a Rust-based encryptor that…

    2 articles · Updated August 10, 2026
  • Gentlemen RaaS Leak Exposes 10% of 2026's Ransomware Victims

    On May 4, 2026, a leak of internal communications from The Gentlemen Ransomware-as-a-Service (RaaS) operation surfaced on underground forums. The leak, which included chats and backend data from November 2025 to April…

    2 articles · Updated May 14, 2026
  • Hacker Claims to Leak 400K Records from Dutch Webshop Bol

    A hacker using the alias 'Jeffrey Epstein' claims to have stolen personal data from over 400,000 Belgian customers of Bol, the largest webshop in the Netherlands and Belgium. The leaked dataset reportedly includes full…

    2 articles · Updated April 22, 2026
  • DeadLock Ransomware Employs Blockchain for Evasion Tactics

    The DeadLock ransomware operation, first identified in July 2025, utilizes blockchain-based smart contracts to evade detection and manage proxy server addresses. This group has targeted various organizations while…

    9 articles · Updated January 14, 2026

Recent Intelligence Reports

  • DeadLock ransomware turns recovery chat into a decentralized takedown challenge — Feeds.4Sysops · August 10, 2026
  • Salesforce Data Thefts Continue via Klue App Compromise — Darkreading · June 18, 2026
  • Cybercrime Breaches Klue: Salesforce Data Impacted for Many Victims, including Huntress — Huntress · June 18, 2026
  • Inside The Gentlemen Leak: How a New RaaS Captured 10% of 2026's Global Ransomware Victims — Kelacyber · May 14, 2026
  • Over 400K records allegedly stolen from major Dutch webshop Bol, data leaked — Scworld · April 22, 2026
  • Hacker “Jeffrey Epstein” leaks 400K records from Netherlands' largest webshop — Cybernews · April 20, 2026
  • EDR killers explained: Beyond the drivers — Welivesecurity · March 19, 2026
  • Indian drug nexus targeting European darknet busted — Newindianexpress · March 9, 2026

CVSS v3.1 Breakdown