
Weekly Intelligence Snapshot – Week 03
Malware such as IceID and Rhadamanthys are employed, leading to stolen credentials and Ransomware infections.
Explore our comprehensive archive organized by taxonomy. Discover a wealth of information categorized by subject, theme, or type to enhance your research and understanding.

Malware such as IceID and Rhadamanthys are employed, leading to stolen credentials and Ransomware infections.

Dark Pink’s core initial vector is spear-phishing emails with threat actors posing as job applicants targeting Government and Military bodies

New year, same Cyber targets. The relentless onslaught on European financial and insurance institutions continues as Security Joes discovers a

In its latest campaign, the Lazarus sub-group BlueNoroff has been operating an infrastructure of over 70 domains impersonating venture capital

The malwareHunterTeam posted a warning about “Photo.apk” – an Android executable which QuoIntelligence determined might announce the imminent arrival

Microsoft releases its Patch Tuesday update with two Zero-Day vulnerabilities, one exploited in Malware distribution.
Regulatory landscapes more complex as

This week we highlight Telecommunication and business process outsourcing companies hit by SIM swapping operations. In geopolitics, we look at

China-nexus group uses new Malware families to infect USBs for Espionage.

Our tracking of the Mustang Panda group reveals a different DLL sideloading technique from those seen this year.

Pro-Russia hacktivist group From Russia With Love has been deploying Somnia Ransomware in Ukraine since spring 2022. But the #Malware
Try searching our blog

China Nexus Quartermaster Infrastructure Enables Espionage Against Research, Defense, Energy, Healthcare and Financial Networks | Germany Says Russia Responsible for Drone Attack at Leipzig Airport

Suspected Russian Clusters Target Academia, Defense, And Government Individuals Across Europe And The US | Slovak Police Thwart Planned Arson Attack on Drone Factory

Ransom Busters Presents Itself as a Ransomware Recovery Company Amid Suspected Links to Ransomware Affiliates | Estonia PM Says Arson Attack on Defense Contractor May Be Linked to Russia

Threat Actor Abuses Salesforce and ServiceNow Guest Portals at Telecommunications, Financial, and Public Sector Organizations | Germany Warns of Daily Hybrid Warfare After Suspected Drone Attack