Russian Intelligence Services (RIS) encompass multiple groups including FSB officers and Russian military personnel. They conduct cyber espionage campaigns targeting government officials,…
ITOCHU documented the hotel phishing campaign and the infection chain involving Node.js implants.
The RecruitTrap campaign uses counterfeit Calendly-style scheduling pages to lure victims into entering credentials, with 96% of phishing pages adopting this theme.
SOC Prime documented the same hotel phishing campaign and the LNK-to-PowerShell-to-Node.js chain prior to Microsoft's report.
Microsoft has issued a warning about an active phishing campaign targeting hotels and hospitality organizations across Europe and Asia since April 2026.…
COLDRIVER is a Russian hacking group known for phishing campaigns targeting opposition figures and human rights activists. The group was mentioned in…
Google Threat Intelligence Group (GTIG) has attributed a previously undocumented .NET backdoor named STOCKSTAY to the Russian state-sponsored threat actor Turla. The…
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories Ravie LakshmananJun 11, 2026Hacking News / Cybersecurity…
Guedz was the primary developer and administrator of the Sniper Dz phishing-as-a-service platform. Arrested by the Algerian National Police as part of…
Sniper Dz was a sophisticated phishing-as-a-service (PhaaS) platform active since at least 2015. It offered ready-made phishing kits, hosting infrastructure, and operational…