
Weekly Intelligence Snapshot – Week 08
We track a campaign where a OneNote file delivers QakBot through politically-themed emails. China published its GSI concept and a

We track a campaign where a OneNote file delivers QakBot through politically-themed emails. China published its GSI concept and a

It’s been a turbulent week, especially for Germany-based organizations. As Germany and the US announced they are to supply frontline

Microsoft releases its Patch Tuesday update with two Zero-Day vulnerabilities, one exploited in Malware distribution.
Regulatory landscapes more complex as

This week we highlight Telecommunication and business process outsourcing companies hit by SIM swapping operations. In geopolitics, we look at

This week we report Emotet is still active. The DFIR Report describes an incident in May 2022 which began with

In this Weekly we report on how a threat actor, possibly Russian, is targeting users in Germany by using information

In this weekly we investigate the emerging threat of NodePacketManager (NPM) becoming an attack vector for supply chains and the

QuoIntelligence is tracking a campaign where the threat actors are using the remote template injection to deliver an espionage implant

This week we cover our observations of #Emotet development, including differences in #TTPs observed in recent samples. We also cover

As the Russian invasion in Ukraine enters its third week, we analyze the latest cyber security events surrounding the invasion
Try searching our blog

AI Coding Agents Publish Internal Screenshots from Over 300 Organizations to Public GitHub Repositories | Denmark Says Russia Has Conducted Sabotage Attacks Against Its Defense Firms
ECSO interviewed Marco Riccardi after QuoIntelligence won the ECSO STARtup Award 2026 as Europe’s Most Promising Cybersecurity Start-up.

AI-Driven Cyberattack on Dutch Institute for Vulnerability Disclosure (DIVD) Automates Exploitation and Post-Compromise Activity | European Trade Unions and Civil Society Groups Tell European Governments To End All Contract With Palantir

New Android Trojan RemControl Targets Retail Bank Customers in Europe and Canada | Poland Suspects Fire at Starlink Station Was Act of Sabotage