Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• Iranian state-backed spies pose as ransomware slingers in false flag attacks

  CSO Online

  T1486 78% T1071.001 58% T1589.001 35%
  6 hours ago
• Salat Malware Abuses QUIC and WebSockets for Stealthy C2 Control

  GBHackers

  T1056.001 99% T1053.005 88% T1573.001 67%
  9 hours ago
• Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware

  Rapid7 Blog

  T1105 99% T1132.001 99% T1486 98%
  10 hours ago
• MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack

  The Hacker News

  T1486 99% T1003.002 60% T1588.001 54%
  10 hours ago
• Attackers adopt JavaScript runtime Bun to spread NWHStealer

  Malwarebytes Labs

  T1497.001 99% T1053.005 95% T1204.002 94%
  10 hours ago
• QLNX Targets Developers in Supply Chain Credential Theft Campaign

  GBHackers

  T1195.001 97% T1587 70% T1014 67%
  14 hours ago
• .de TLD offline due to DNSSEC?

  Hacker News (front page)

  T1071.001 69% T1074.001 56%
  1 day ago
• DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware

  The Hacker News

  T1195.002 97% T1071.001 77% T1059.004 65%
  1 day ago
• Hackers Abuse DAEMON Tools Distribution Channel to Deliver Malicious Payloads

  GBHackers

  T1059.001 98% T1543.004 95% T1195.002 89%
  1 day ago
• UAT-8302 and its box full of malware

  Cisco Talos Intelligence

  T1053.005 100% T1087.002 98% T1055.001 97%
  1 day ago
• CloudZ RAT potentially steals OTP messages using Pheno plugin

  Cisco Talos Intelligence

  T1053.005 100% T1105 100% T1204.002 84%
  1 day ago
• North Korean hackers trojanize gaming platform to spy on ethnic Koreans in China

  Help Net Security

  T1204.002 78% T1071.001 78% T1219 35%
  1 day ago
• InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise

  Trend Micro Research

  T1027 100% T1059.001 99% T1218.005 92%
  1 day ago
• Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia

  The Hacker News

  T1204.002 95% T1566.002 80% T1566.001 78%
  2 days ago
• [hardware] Linksys E1200 2.0.04 - Authenticated Stack Buffer Overflow (RCE)

  Exploit-DB

  T1071.001 95% T1190 89%
  2 days ago
• Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities

  Trend Micro Research

  T1195.001 98% T1574.006 98% T1014 96%
  2 days ago
• Bad Connection: Global telecom exploitation by covert surveillance actors

  Hacker News (front page)

  T1071.001 91% T1090.003 84% T1111 62%
  3 days ago
• Scorpions go terminator mode and reinforce their weapons with metal

  Ars Technica

  T1071.001 71%
  5 days ago
• That AI Extension Helping You Write Emails? It’s Reading Them First

  Palo Alto Unit 42

  T1176.001 97% T1176 97% T1071.001 88%
  6 days ago
• Patch management goes from hard, to ludicrous in the agentic AI era

  Coveware

  T1486 94% T1657 54% T1071.001 47%
  6 days ago
• ClickFix Removes Your Background but Leaves the Malware

  Huntress

  T1055.001 99% T1055.012 99% T1555.003 99%
  6 days ago
• EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

  The Hacker News

  T1547.001 99% T1608.006 73% T1071 71%
  6 days ago
• What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia

  The Register

  T1190 99% T1078 44% T1505.003 41%
  6 days ago
• What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia

  The Register Security

  T1071.001 46%
  6 days ago
• Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India

  Kaspersky Securelist

  T1071.001 97% T1486 96% T1566.001 96%
  6 days ago
• [webapps] SumatraPDF 3.5.2 - Remote Code Execution

  Exploit-DB

  T1204.002 90% T1203 49% T1071.001 42%
  6 days ago
• [webapps] SUSE Manager 4.3.15 - Code Execution

  Exploit-DB

  T1059.006 90% T1059.004 56% T1071.001 37%
  6 days ago
• After Mythos: New Playbooks For a Zero-Window Era

  The Hacker News

  T1071.001 60% T1021.002 44%
  2026-04-28
• Crime crew impersonates help desk, abuses Microsoft Teams to steal your data

  The Register Security

  T1684.001 96% T1071.001 94% T1555.003 85%
  2026-04-25
• fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

  SentinelOne Labs

  T1012 80% T1569.002 79% T1112 79%
  2026-04-23
• Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

  Mandiant

  T1053.005 100% T1572 98% T1550.002 96%
  2026-04-23
• GopherWhisper: A burrow full of malware

  ESET WeLiveSecurity

  T1055.001 97% T1071 75% T1102.002 71%
  2026-04-23
• Reviving Teletext for Ham Radio

  IEEE Spectrum

  T1071.001 54%
  2026-04-22
• Malicious trading website drops malware that hands your browser to attackers

  Malwarebytes Labs

  T1055.012 99% T1176 86% T1176.001 84%
  2026-04-22
• IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist

  Cisco Talos Intelligence

  T1021.001 99% T1486 96% T1556.006 86%
  2026-04-22
• Evolution of Chinese-Language Guarantee Telegram Marketplaces

  Recorded Future Blog

  T1071.001 37% T1204.002 37% T1204 34%
  2026-04-22
• 20th April – Threat Intelligence Report

  Check Point Research

  T1068 78% T1195.001 74% T1190 57%
  2026-04-20
• FakeWallet crypto stealer spreading through iOS apps in the App Store

  Kaspersky Securelist

  T1041 83% T1071.001 77% T1027 71%
  2026-04-20
• Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

  Microsoft Security Blog

  T1021.006 99% T1059.003 92% T1059.001 76%
  2026-04-18
• Joomla SEO Spam Injector: Obfuscated PHP Backdoor Hijacking Site Visitors

  Sucuri Blog

  T1071.001 32%
  2026-04-16
• Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise

  Microsoft Threat Intelligence

  T1548.006 100% T1543.004 97% T1555.003 97%
  2026-04-16
• PowMix botnet targets Czech workforce

  Cisco Talos Intelligence

  T1059.001 99% T1053.005 99% T1204.002 91%
  2026-04-16
• When PUPs Grow Fangs: Dragon Boss Solutions' $10 Supply Chain Risk

  Huntress

  T1546.003 100% T1218.007 99% T1053.005 99%
  2026-04-14
• Attackers Actively Exploiting Critical Vulnerability in Kali Forms Plugin

  Wordfence Blog

  T1190 96% T1071.001 40%
  2026-04-13
• JanelaRAT: a financial threat targeting users in Latin America

  Kaspersky Securelist

  T1574.001 69% T1204.002 68% T1573.001 61%
  2026-04-13
• Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

  Microsoft Threat Intelligence

  T1071.001 96% T1556.006 92% T1137.005 86%
  2026-04-09
• Inside the Mobile World Congress 2026 SOC: Detecting Shadow Traffic with Firepower 6100

  Cisco Security Blog

  T1071.001 82% T1090.003 78% T1090.002 64%
  2026-04-09
• Introducing C2 Detection: Know When Your Edge Devices Are Calling Home to Attackers

  GreyNoise

  T1071.001 60%
  2026-04-07
• Latin America and the Caribbean Cybercrime Landscape

  Recorded Future Blog

  T1005 98% T1566.002 95% T1486 94%
  2026-04-02
• Mitigating the Axios npm supply chain compromise

  Microsoft Threat Intelligence

  T1071.001 99% T1195.001 98% T1059.001 98%
  2026-04-01