Threat Intelligence
All posts in the Threat Intelligence category.
A0Backdoor Emerges from BlackBasta's Ashes via Teams Phishing
New A0Backdoor malware uses DNS MX records for C2, deployed via Microsoft Teams social engineering targeting financial and healthcare orgs
AI-Assisted Hacker Breaches 600+ FortiGate Firewalls Across 55 Countries
A Russian-speaking threat actor used commercial AI tools to compromise over 600 FortiGate firewalls in just five weeks, per Amazon Threat Intelligence.
Warlock Gang Breached SmarterTools Through Its Own Email Server Software
China-linked ransomware group Storm-2603 compromised SmarterTools by exploiting critical SmarterMail vulnerabilities, then turned the same flaws against the vendor's customers.
Lotus Blossom Turned Notepad++ Into a Six-Month Espionage Pipeline
Chinese APT Lotus Blossom hijacked Notepad++ updates for six months to deploy the custom Chrysalis backdoor targeting telecom and government organizations.
Sandworm Strikes Poland: ICS Equipment Bricked in Power Grid Attack
Russian APT ELECTRUM breached ~30 Polish energy sites, disabling OT equipment beyond repair in the first major attack on distributed energy resources.