Tag: Threat Actors

ShadowSyndicate is an opportunistic, financially-motivated threat actor, active since July 2022, who was linked with various ransomware strains such as Quantum.

Magnet Goblin is a financially motivated threat actor who quickly leverages 1-day vulnerabilities, often in edge devices, after their disclosure.

Threat actors, particularly the Muddled Libra hacking group, leverage pentesting tools to identify and exploit vulnerabilities within target systems or networks.

The group drops an eponymous ransomware via phishing attacks and Cobalt Strike to breach targets’ networks and deploy their payloads.

A financially driven threat actor, identified as Magnet Goblin, is incorporating one-day security vulnerabilities into its arsenal to breach edge devices.

Threat actors are resorting to concealing malware within SVG image files to avoid detection and facilitate the delivery of ransomware, banking Trojans...

A gang of hackers known as TA4903 has been executing business email compromise (BEC) attacks by impersonating various U.S. government entities.

Black Basta employs a double extortion scheme that involves exfiltrating confidential data before encryption to threaten victims with public release.

The hacking group TA577 has shifted tactics towards phishing, specifically targeting NTLM authentication hashes for account hijacks.

Winter Vivern is a cyberespionage group to have been active since at least 2020 and it targets governments in Europe and Central Asia.