Gamaredon

MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

AI-Assisted Cyberespionage Campaign Targets Government Systems

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

FamousSparrow Takes Flight with New SparroWocky Backdoor

China and the Cyber Arms Race for AI Supremacy

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

Konni Hackers Target Ukraine With Malicious LNK Files and VelvetCake PowerShell Malware

Tracking UAC-0226 Tooling Evolution: From WinRAR ADS to Reflective GIFTEDCROOK Loading

GhostShell (MB-0009): Targeting Ukraine’s UAV Operations and Defense Supply Chain

Obfuscation Without Effort: Breaking a UAC-0226 GIFTEDCROOK Stealer

UAC-0184: From HTA to a Signed Network Stack

IIM – The Grammar of Adversary Infrastructure (3/7)