Search for a command to run...
Articles tagged with #threat-group
Summary CRIL came across a blog published by Kaspersky detailing a Lazarus group campaign dubbed "Operation SyncHole" active since November 2024. The attackers used a watering hole strategy combined with vulnerability exploitation to target at least ...
Summary CRIL came across a blog published by Check Point Research detailing a sophisticated phishing campaign linked to the Russian threat group APT29 (also known as Midnight Blizzard or Cozy Bear). This campaign, active since January 2025, targets E...
Summary Cyble Research and Intelligence Labs (CRIL) came across an article in which a security researcher discovered that the Kimsuky threat group had evolved its attack methods in 2024. It maintained the use of LNK malware in spear-phishing campaign...
Summary Cyble Research and Intelligence Labs (CRIL) came across an article in which security researchers identified attack samples by the GamaCopy APT group targeting Russian-speaking targets. Attackers have leveraged military-themed content as bait ...
Summary APT-C-26 (Lazarus) is a highly active and sophisticated threat actor that targets financial institutions, cryptocurrency platforms, government agencies, and industries like aerospace and military to steal funds and sensitive data. Their attac...
Summary In October 2024, researchers identified a new ransomware group, "Hellcat", which employs double extortion tactics by encrypting data and threatening to release it unless a ransom is paid. The Hellcat ransomware group quickly captured widespre...
