Researchers at Kroll have reported a new espionage campaign deploying the GONEPOSTAL malware. This tool was uncovered in operations attributed to the group KTA007, also known as Fancy Bear, APT28, and Pawn Storm. Its...
The subject of a new investigation is Alviva Holding, a provider whose infrastructure has long been a cornerstone for cybercriminal groups. The trigger for the probe was a change in contact details within the...
ThreatFabric analysts have reported the emergence of a new and highly sophisticated banking trojan named RatOn, which fuses the capabilities of a traditional Android malware strain with advanced remote-access features and targeted attacks on...
By the close of 2023, it had become evident that the largest coordinated crackdown to date on DDoS-for-Hire services produced a paradoxical outcome. Researchers, presenting their findings at USENIX Security 2025, traced the market’s...
The Australian Institute of Criminology has unveiled a comprehensive study exposing the inner workings of ransomware syndicates and their impact on Australia and allied nations. Researchers analyzed 865 attacks recorded between 2020 and 2022...
The threat group TAG-150, which researchers associate with the development of the CastleLoader malware, has expanded its arsenal with a new remote access trojan (RAT) known as CastleRAT. The discovery was reported by Recorded...
The hacking scene has once again made headlines with a provocative declaration. A Telegram channel carried a message from a group styling itself as “Scattered LapSus Hunters.” They claim to have gained access to...
The arrest of the alleged administrator of the Russian-speaking forum XSS[.]is, known under the alias Toha, has become a critical inflection point for the entire underground market. According to law enforcement, on July 22,...
Cybercriminals have launched a new wave of attacks that employ SVG files as carriers for phishing pages. According to researchers at VirusTotal, the attackers disguise themselves as representatives of the Colombian Prosecutor’s Office, distributing...
Kaspersky Lab has published its first comprehensive technical analysis of cyber groups most actively targeting Russian organizations. The report details 14 groups, outlining their tactics, tools, and the confirmed links between them. Experts identified...
A California resident has found himself at the center of a high-profile criminal case involving ransomware extortion attacks. According to the U.S. Department of Justice, the defendant allegedly participated in the distribution of the...
Researchers at Stripe OLT’s SOC have uncovered a large-scale, targeted phishing campaign aimed at senior executives and top managers across multiple industries. The attackers distribute emails disguised as internal correspondence from HR departments, inviting...
