Telegram Group — Attack group profile
Telegram Group was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Category: Attack Groups
MITRE ATT&CK groups, threat actors, intrusion sets and activity clusters.
Sniper Dz PhaaS Campaign Targets MENA Users via Fake Facebook Offers and Browser Alerts
Cybersecurity researchers at Group-IB have uncovered a fraudulent campaign targeting users across the Middle East and North Africa (MENA) region. The operation,…
Sniper Dz: Phishing-as-a-Service Platform Targeting MENA Users
Sniper Dz is a turnkey phishing-as-a-service (PhaaS) platform that was taken down in an INTERPOL-led operation. It facilitates credential theft and generates…
Cyber Av3ngers: Iranian-Linked Hacktivist Group Exploiting Default Credentials in Critical Infrastructure
Cyber Av3ngers is an Iranian-linked hacktivist group that targeted the Municipal Water Authority of Aliquippa in Pennsylvania in November 2023, exploiting default…
UNK_DeadDrop — Attack group profile
UNK_DeadDrop was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
North Korean Hackers Weaponize VS Code and Developer Tools in Supply Chain Attacks
Cybersecurity researchers have uncovered two malicious campaigns linked to North Korean threat actors, exploiting developer tools like Microsoft Visual Studio Code (VS…
Contagious Interview Campaign
A long-running North Korean cyber campaign that typically uses fake job offers and coding tests to lure victims. This iteration uses malvertising…
Lazarus Group: North Korea-Linked Threat Actor
Lazarus Group is a North Korea-linked advanced persistent threat group known for cyber espionage and financially motivated attacks. It exploited CVE-2026-68820 as…
BlueNoroff: North Korean Cybercrime Group
BlueNoroff is a North Korean cybercrime group targeting cryptocurrency exchanges and financial institutions, overlapping with Sapphire Sleet and UNC1069.
HexagonalRodent — Attack group profile
HexagonalRodent was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…