BlueNoroff: North Korean Cybercrime Group
BlueNoroff is a North Korean cybercrime group targeting cryptocurrency exchanges and financial institutions, overlapping with Sapphire Sleet and UNC1069.
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
HexagonalRodent — Attack group profile
HexagonalRodent was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Void Dokkaebi — Attack group profile
Void Dokkaebi was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
A China-linked espionage group tracked as UNC6508 compromised REDCap research servers across North American medical, academic, and military institutions, stealing sensitive research…
UNC6508: China-Linked Espionage Group Abusing Google Workspace
UNC6508 is a China-linked cyber espionage group that compromised REDCap research servers and abused Google Workspace content compliance rules to exfiltrate sensitive…
UAT-8616: Advanced Persistent Threat Actor Targeting Cisco SD-WAN
An advanced persistent threat (APT) actor attributed to the exploitation of multiple Cisco SD-WAN vulnerabilities in 2026, including CVE-2026-20262.
ScarCruft (APT37) – North Korean State-Sponsored Hacking Group
ScarCruft, also known as APT37, is a North Korean state-sponsored hacking group known for spear-phishing campaigns and deploying malware like RokRAT and…
APT37 (ScarCruft) – North Korean Cyber Espionage Group
APT37, also known as ScarCruft, is a North Korean cyber espionage group that has been active since at least 2012. They are…
Vanilla Tempest: Financially Motivated Threat Actor Behind Lorem Ipsum Loader
Vanilla Tempest, also known as Rapid Brigantine, Vice Society, and Vice Spider, is a financially motivated threat actor known for deploying ransomware…
Fox Tempest (Forging Marauder): Threat Actor Disrupted by Microsoft
Fox Tempest, also known as Forging Marauder, is a threat actor that advertised a malware-signing-as-a-service (MSaaS) operation. Microsoft's disruption of this service…