Related Threat Clusters

Localized Phishing Campaign Targets Cambodian Organizations with Multi-Stage Malware
A recent cyber campaign has been identified targeting organizations in Cambodia, utilizing localized phishing lures. The attack employs a complex multi-stage infection chain, starting with an Inno Setup installer that…

2 articles · Updated August 28, 2026
Bank of America Phishing Scam Installs ScreenConnect Malware
A phishing email masquerading as a Bank of America message has been identified, targeting users to install ScreenConnect malware. The email, received by Huntress on July 28, prompts recipients to visit a fake website…

2 articles · Updated August 5, 2026
APT41 Cyber-Espionage Tactics Explored in Ransomware Emulations
The article discusses the fifth volume of AttackIQ’s Ransom Tales series, which simulates the tactics of ransomware families REvil, DarkSide, and BlackMatter. These emulations are designed to help organizations validate…

14 articles · Updated January 6, 2026

Recent Intelligence Reports

Cambodia-Focused Threat Cluster Uses Localized Phishing and Multi — Socprime · August 28, 2026
T1548.002 — cyberbuff.github.io · August 5, 2026
APT41 group Tactics vs Ransomware Emulations in AttackIQ Ransom Tales — Socprime · November 20, 2025

APT41 Malware Phishing Ransomware Apt41 Cyber-Espionage Campaign Cambodia CVE-2017-17562 CVE-2017-9805 CVE-2021-44228 CVE-2022-26134 CVE-2026-36425 CWE-269 - Improper Privilege Management