Group-IB’s Threat Intelligence team has published a detailed analysis of a new cyber-espionage campaign very likely attributable to the MuddyWater APT. The intrusion began with a compromised mailbox that the attackers accessed via a...
A multi-stage phishing campaign known as Tykit has been targeting Microsoft 365 corporate users, actively employed to steal login credentials. Researchers at ANY.RUN have observed a surge in its activity since May 2025, reaching...
Kuba Gretzky originally sought to make the internet a safer place — yet his creation achieved the opposite. In 2017, the Polish programmer developed Evilginx, a tool designed to help Red Team professionals study...
European law enforcement agencies executed a sweeping operation, codenamed SIMCARTEL, successfully dismantling an international criminal infrastructure that supplied virtual telephone numbers to fraudsters. According to Europol, this illicit service was instrumental in perpetrating over...
In recent weeks, a surge of phishing campaigns has emerged in which attackers impersonate popular password managers — LastPass, Bitwarden, and 1Password. Their objective is to deceive users into revealing their master password, the...
Microsoft has released its Digital Defense Report 2025, documenting a sharp surge in attacks targeting digital identities, the misuse of artificial intelligence in cybercrime, and the heightened activity of state-sponsored threat groups. According to...
The Microsoft Edge Security Team has introduced sweeping changes to the operation of Internet Explorer Mode after confirming a series of targeted cyberattacks exploiting its legacy components. Experts discovered that malicious actors had been...
In Spain, authorities have concluded a large-scale operation targeting one of the most active cybercriminal groups operating within the Spanish-speaking segment of the internet. Law enforcement officers apprehended the alleged leader of the network,...
The ClayRat espionage campaign is evolving rapidly and increasingly targeting Android users. According to Zimperium, the malware is spreading actively among Russian users via fake websites and Telegram channels, disguising itself as popular applications...
According to a new report from Microsoft Threat Intelligence, the financially motivated group Storm-2657 is conducting large-scale attacks against universities and private companies, using stolen employee credentials to redirect payroll funds into their own...
Researchers at Fortinet FortiGuard Labs have uncovered a new cyber-attack campaign masquerading as communications from the National Police of Ukraine and employing an unusual malware delivery chain. The attackers dispatch emails with SVG attachments...
Experts at Silent Push have released an in-depth study on subdomain rental services, often referred to in documentation and forums as Dynamic DNS. These platforms allow any user to acquire a third-level domain and...
