WinSCP - Tool

Threat entity extracted from intelligence sources

Frequency
17
occurrences
First Seen
December 2, 2025
Last Seen
July 15, 2026

WinSCP is a tool tracked across 9 threat clusters and 17 intelligence report mentions on ThreatCluster. First observed December 2, 2025; most recent activity July 15, 2026.

Related Threat Clusters

  • Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

    On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…

    67 articles · Updated June 18, 2026
  • Foxconn Cyberattack: Nitrogen Ransomware Claims 8TB of Data Theft

    Foxconn confirmed a cyberattack on its North American facilities, attributed to the Nitrogen ransomware group, which claims to have stolen 8 terabytes of data, including over 11 million files. The attack reportedly…

    54 articles · Updated May 12, 2026
  • Data Breach Exposes Sensitive Files from Kudankulam Nuclear Plant

    In July 2026, the ransomware group World Leaks leaked approximately 19,000 files related to India's Kudankulam Nuclear Power Plant on the dark web. The data, allegedly sourced from Reliance Group, includes blueprints,…

    57 articles · Updated July 15, 2026
  • Ransomware Fuels Surge in Global Cyberattacks

    As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…

    1553 articles · Updated February 12, 2026
  • US Government Agency Paid $1M to Data Extortion Group Kairos

    A U.S. government entity reportedly paid $1 million to the Kairos extortion group to prevent the public release of sensitive data. The payment was revealed in a Ransom-ISAC case study, which utilized a leaked…

    9 articles · Updated July 4, 2026
  • Adaptavist Group Breach: Ransomware Claims Major Data Theft

    The Adaptavist Group, a UK enterprise software consultancy, is investigating a security breach that occurred in late March 2026, when an attacker gained unauthorized access using stolen credentials. CEO Simon…

    4 articles · Updated April 21, 2026
  • Silver Fox APT Deploys ValleyRAT via Fake Installers Targeting China

    The Silver Fox APT group has launched a campaign targeting users in China by distributing malware through fake installers of popular applications, including Microsoft Teams. The malware, known as ValleyRAT, employs…

    2 articles · Updated December 4, 2025
  • Oyster Backdoor Malware Spread via Fake Downloads Targeting Financial Sector

    Cybercriminals are distributing the Oyster backdoor malware disguised as popular office tools, including Microsoft Teams and Google Meet. This campaign, targeting individuals in the financial sector, has been active…

    1 article · Updated December 15, 2025
  • Silver Fox APT Group Deploys ValleyRat via Trojans in Popular Apps

    A malware campaign has been identified where the Silver Fox APT group is distributing trojanized installers for popular applications such as Telegram, WinSCP, Google Chrome, and Microsoft Teams. This campaign delivers…

    3 articles · Updated December 2, 2025

Recent Intelligence Reports

  • Data Extortion targeting Kudankulam Nuclear Plant engineering documents — Shieldworkz · July 15, 2026
  • Fbi Warns Of Luna Moth Extortion Attacks Targeting Law Firms — www.bleepingcomputer.com · July 5, 2026
  • StealC infrastructure takedown assisted by AI analysis, C2 infiltration — Feeds.Feedburner · June 25, 2026
  • Trend Micro — www.trendmicro.com · June 17, 2026
  • Targeted Campaign Us Law Firms — cloud.google.com · June 10, 2026
  • If you don't fall for these extortionists' calls, they'll show up with USB sticks — Theregister · June 5, 2026
  • Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms — Mandiant · June 5, 2026
  • Silent Ransom Group Sends Operatives Into Law Firm Offices: 38 Firms Already Leaked — Techtimes · May 28, 2026

CVSS v3.1 Breakdown