Related Threat Clusters
-
Armored Likho APT Targets Power Grids with BusySnake Stealer Malware
A newly identified APT group, Armored Likho, is conducting a phishing campaign targeting government agencies and electric power sectors in Russia, Brazil, and Kazakhstan. The group employs a sophisticated infostealer…
7 articles · Updated July 4, 2026 -
Russian UAT-11795 Targets Users with Trojans in Legitimate Software
A Russian threat actor known as UAT-11795 has been deploying the Starland RAT and WLDR agent since June 2025, primarily targeting users in the U.S., Germany, Romania, and Venezuela. The group uses trojanized installers…
6 articles · Updated July 17, 2026 -
Supply Chain Attack Compromises DAEMON Tools with Malicious Backdoor
A supply chain attack has compromised the DAEMON Tools software installers, which began on April 8, 2026. Kaspersky identified that these trojanized installers, signed with legitimate digital certificates, have affected…
26 articles · Updated May 5, 2026 -
Data Breach Exposes Sensitive Files from Kudankulam Nuclear Plant
In July 2026, the ransomware group World Leaks leaked approximately 19,000 files related to India's Kudankulam Nuclear Power Plant on the dark web. The data, allegedly sourced from Reliance Group, includes blueprints,…
57 articles · Updated July 15, 2026 -
State-Sponsored Hackers Compromise Notepad++ Update Mechanism
Notepad++ has been hijacked by state-sponsored hackers, specifically a likely Chinese threat actor. The attackers compromised the software's update mechanism between June and December 2025, allowing them to redirect…
100 articles · Updated February 2, 2026 -
China Arrests 67 Members of Silver Fox Cybercrime Group
Chinese authorities have arrested 67 suspects linked to the Silver Fox cybercrime group, which primarily targeted Chinese-speaking users. The arrests occurred across five provinces, including Zhejiang, Jilin, Shandong,…
2 articles · Updated June 17, 2026
Recent Intelligence Reports
- Russian hackers trojanize WebEx, Zoom apps to push Starland malware — Bleepingcomputer · July 16, 2026
- Data Extortion targeting Kudankulam Nuclear Plant engineering documents — Shieldworkz · July 15, 2026
- New APT Group Hits Power Grids in Three Countries with AI-Crafted Malware — Techtimes · July 4, 2026
- Silver Fox Targeting India Using Tax Themed Phishing Lures — www.cloudsek.com · June 17, 2026
- Tr Chrysalis Backdoor Dive Into Lotus Blossoms Toolkit — www.rapid7.com · May 6, 2026
- Rapid7 links Lotus Blossom APT to Notepad++ compromise, delivering Chrysalis — Industrialcyber.Co · February 9, 2026
- Notepad++ hijacking linked to Chinese Lotus Blossom crew — Theregister · February 2, 2026
- Notepad++ hijacking blamed on Chinese Lotus Blossom crew behind Chrysalis backdoor — Theregister · February 2, 2026