Vectra AI: Cybersecurity Firm Identifying DevMan’s DragonForce Lineage
Vectra AI is a cybersecurity company that noted the DevMan locker's DNA is unmistakably DragonForce, highlighting the ransomware's shared lineage. The company…
Tag: threat intelligence
Israel National Cyber Directorate (INCD) Bulletin on DevMan
The Israel National Cyber Directorate (INCD) published a bulletin describing DevMan as a threat actor with a high-profile online presence, often bragging…
Ransomware.Live: Victim Statistics for DevMan
Ransomware.Live is a platform that tracks ransomware victim statistics. According to its data, DevMan has claimed 184 victims, with no new victims…
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
The operators of the DevMan ransomware-as-a-service (RaaS) scheme maintain a dedicated web platform that offers affiliates the ability to build payloads, oversee…
Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are…
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
Seqrite: Cybersecurity Company
Seqrite, a cybersecurity firm, analyzed a January 2026 incident at a Ukrainian state hydrology agency involving the Zimbra zero-day. It attributed the…
Arctic Wolf Labs Uncovers AitM Phishing Campaign
Arctic Wolf Labs, the research division of Arctic Wolf, identified and analyzed a widespread AitM phishing campaign targeting Microsoft 365 accounts. Their…
New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator first documented earlier this…
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…