Sniper Dz: Phishing-as-a-Service Platform Targeting MENA Users
Sniper Dz is a turnkey phishing-as-a-service (PhaaS) platform that was taken down in an INTERPOL-led operation. It facilitates credential theft and generates…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
Cyber Av3ngers: Iranian-Linked Hacktivist Group Exploiting Default Credentials in Critical Infrastructure
Cyber Av3ngers is an Iranian-linked hacktivist group that targeted the Municipal Water Authority of Aliquippa in Pennsylvania in November 2023, exploiting default…
UNK_DeadDrop — Attack group profile
UNK_DeadDrop was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
North Korean Hackers Weaponize VS Code and Developer Tools in Supply Chain Attacks
Cybersecurity researchers have uncovered two malicious campaigns linked to North Korean threat actors, exploiting developer tools like Microsoft Visual Studio Code (VS…
Contagious Interview Campaign
A long-running North Korean cyber campaign that typically uses fake job offers and coding tests to lure victims. This iteration uses malvertising…
Lazarus Group: North Korea-Linked Threat Actor
Lazarus Group is a North Korea-linked advanced persistent threat group known for cyber espionage and financially motivated attacks. It exploited CVE-2026-68820 as…
BlueNoroff: North Korean Cybercrime Group
BlueNoroff is a North Korean cybercrime group targeting cryptocurrency exchanges and financial institutions, overlapping with Sapphire Sleet and UNC1069.
HexagonalRodent — Attack group profile
HexagonalRodent was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Void Dokkaebi — Attack group profile
Void Dokkaebi was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
A China-linked espionage group tracked as UNC6508 compromised REDCap research servers across North American medical, academic, and military institutions, stealing sensitive research…