Related Threat Clusters
-
EU Sanctions Vitaly Kovalev, Ransomware Leader of Trickbot Group
On July 14, 2026, the European Union, in coordination with the U.S. and U.K., sanctioned Vitaly Nikolayevich Kovalev, known as 'Stern,' a key figure in the Trickbot ransomware syndicate. Kovalev is linked to over $300…
4 articles · Updated July 15, 2026 -
US Indicts Russian Nationals for $62M Cybercrime Scheme Targeting Critical Infrastructure
On July 14, 2026, the US Justice Department unsealed an indictment against three Russian nationals—Alexander Volosovik, Kirill Zatolokin, and Yulia Pankova—accused of operating bulletproof hosting services that…
29 articles · Updated July 14, 2026 -
Exploitation of Remote Services in Cyber Attacks
Adversaries are increasingly leveraging external remote services like VPNs and Citrix to gain unauthorized access to networks. These attacks often involve using valid accounts obtained through credential harvesting or…
2 articles · Updated June 3, 2026 -
Social Engineering Campaign Hijacks Microsoft 365 Accounts via Passkey Alerts
A social engineering campaign impersonating IT support staff is actively hijacking Microsoft 365 accounts. The attackers use passkey-themed lures to trick users into providing credentials, leading to unauthorized access…
8 articles · Updated September 10, 2026 -
Education Sector Faces Surge in Cyberattacks Amid Open Network Vulnerabilities
SonicWall's 2026 Education Protect Brief reveals that educational institutions are experiencing the highest per-device cyberattack intensity of any tracked sector, with 81,879 intrusion prevention system (IPS) hits per…
6 articles · Updated September 2, 2026 -
GrayAlpha Threat Actor Uses MaskBat Loader for NetSupport RAT Deployments
Insikt Group identified GrayAlpha, a threat actor linked to FIN7, utilizing a custom loader named MaskBat to deploy NetSupport RAT through various infection vectors. These include fake browser update pages, fake 7-Zip…
2 articles · Updated August 6, 2026 -
Ukrainian National Pleads Guilty in Conti Ransomware Case
Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national, pleaded guilty to conspiracy to commit wire fraud related to the Conti ransomware operation. This group was responsible for over 1,000 attacks…
17 articles · Updated June 12, 2026 -
SonicWall Report Highlights Cyber Threats to Professional Services Firms
SonicWall's 2026 Professional Services Protect Brief reveals that professional services firms, including law firms and managed service providers, experienced 3 billion IPS events in the first half of 2026, marking the…
2 articles · Updated August 13, 2026 -
Ransomware Fuels Surge in Global Cyberattacks
As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…
1922 articles · Updated February 12, 2026 -
US Government Agency Paid $1M to Data Extortion Group Kairos
A U.S. government entity reportedly paid $1 million to the Kairos extortion group to prevent the public release of sensitive data. The payment was revealed in a Ransom-ISAC case study, which utilized a leaked…
9 articles · Updated July 4, 2026
Recent Intelligence Reports
- T1585.002 Establish Accounts: Email Accounts — attack.mitre.org · September 9, 2026
- SonicWall Report: Education Sector Faces Highest Per — Cxotoday · September 3, 2026
- SonicWall finds education faces highest per — Intelligentciso · September 3, 2026
- Goto — www.google.co.uk · September 2, 2026
- SonicWall Research Issues Education Cybersecurity Report Card as Attackers Exploit the ... — Morningstar · September 2, 2026
- SonicWall Research Issues Education Cybersecurity Report Card as Attackers Exploit the ... — Prnewswire · September 2, 2026
- Russian Motivations Hanoi Convention Cybercrime — www.justsecurity.org · August 22, 2026
- News | SonicWall Report: Professional Services Face Cyber Threats — Pipelinepub · August 13, 2026