MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
The ShinyHunters extortion crew exploited an unpatched remote code execution vulnerability in Oracle PeopleSoft (CVE-2026-35273) to breach enterprise systems, primarily targeting universities.…
Mandiant tracks the ShinyHunters group as UNC6240, attributing the Oracle PeopleSoft zero-day exploitation campaign to them.
Guedz was the primary developer and administrator of the Sniper Dz phishing-as-a-service platform. Arrested by the Algerian National Police as part of…
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
Velvet Ant, tracked by Sygnia, is a China-nexus threat actor known for targeting infrastructure components like F5 BIG-IP, Cisco NX-OS, and Linux…
A Chinese cybercrime network operating the Outsider PhaaS platform, using Gemini AI for phishing. Coordinated via Telegram, it includes Developer, Data Broker,…
Developer Group was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Data Broker Group was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news,…
Spammer Group was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Theft Group was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…