Related Threat Clusters
-
MuddyWater Targets U.S. Entities Amid Geopolitical Tensions
In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
16 articles · Updated July 22, 2026 -
FrostyNeighbor Cyberespionage Campaign Targets Ukrainian and Polish Governments
The Belarus-aligned cyber group FrostyNeighbor has launched a targeted campaign against government organizations in Ukraine and Poland since March 2026. Utilizing spearphishing techniques, the group delivers malicious…
8 articles · Updated May 14, 2026 -
Webworm APT Expands Operations to Europe with New Backdoors
The China-aligned APT group Webworm has shifted its focus from Asia to Europe, targeting government organizations in Belgium, Italy, Poland, Serbia, and Spain during 2025. ESET researchers identified new backdoors,…
12 articles · Updated May 20, 2026 -
TeamPCP Compromises Microsoft DurableTask and GitHub Actions in Supply Chain Attack
The TeamPCP threat group has expanded its supply chain attack campaign, compromising the Microsoft DurableTask Python client with versions v1.4.1, v1.4.2, and v1.4.3 found to contain a credential-stealing worm. This…
11 articles · Updated May 20, 2026 -
PATCHCORD Malware Targets Afghan Telecom and South Asian Infrastructure
Acronis Threat Research Unit has identified a new malware campaign named PATCHCORD, targeting Afghan telecom providers and critical infrastructure in South Asia. The malware, a custom backdoor written in C/C++, is…
10 articles · Updated August 13, 2026 -
North Korean PurpleDelta Network Exploits Remote Hiring for Fraudulent Employment
Insikt Group has identified PurpleDelta, a North Korean IT worker network, employing over 22 fabricated personas to apply for jobs at more than 1,100 companies, likely securing positions at ten or more organizations.…
3 articles · Updated August 19, 2026 -
North Korean Hackers Exploit Fake Microsoft Teams Domains for Malware Attacks
Threat actors linked to North Korea, identified as UNC1069, are using fake Microsoft Teams domains to execute social engineering attacks and distribute malware. These attacks target corporate users by mimicking the…
4 articles · Updated April 6, 2026 -
AWS Strands Agents Tools Exposed to Multiple CVEs in 23 Days
Between July 15 and August 6, 2026, AWS Strands Agents Tools received four CVEs due to a design flaw exposing security-sensitive parameters as LLM-controllable inputs. The vulnerabilities include CVE-2026-15746…
2 articles · Updated August 22, 2026 -
Bitdefender Alerts on APT36's New AI 'Vibeware' Targeting India
Bitdefender has reported a new AI-driven attack model termed 'vibeware', which generates numerous disposable malware variants. This tactic is linked to APT36 (Transparent Tribe), a Pakistan-aligned threat actor that has…
8 articles · Updated March 6, 2026 -
Mercor Cyberattack Linked to LiteLLM Supply Chain Compromise
AI recruiting startup Mercor confirmed it was impacted by a supply chain attack linked to the LiteLLM project, which has affected thousands of organizations. The breach was attributed to the hacking group TeamPCP, with…
30 articles · Updated April 1, 2026
Recent Intelligence Reports
- Link — edge.prnewswire.com · September 2, 2026
- Global sinkhole operation ends Sality botnet's 23-year run — Helpnetsecurity · September 2, 2026
- Spinone — spin.ai · September 1, 2026
- Communication Channel Identity Risks — unit42.paloaltonetworks.com · August 31, 2026
- Lunar Cyber Launches Token Exposure Monitoring as Infostealers Target Developer and AI ... — Cybersecurity-Insiders · August 31, 2026
- Lunar Cyber Launches Token Exposure Monitoring as Infostealers Target Developer and AI ... — Markets.Businessinsider · August 31, 2026
- Lunar Cyber Launches Token Exposure Monitoring as Infostealers Target Developer and AI ... — Cio · August 31, 2026
- AWS Strands Agents Tools Received Four CVEs in 23 Days — And They All Share the Same Root Cause — Forkast.News · August 22, 2026