TrendAI says SHADOW-EARTH-79 used ad bidding to track Starlink users
Researchers say the bidder led Starlink ad wins in 105 countries and bought 66,208 Starlink impressions, without confirming malicious code on every impression.
58
Country
Hungary
- Mentions · 7d1
- Mentions · 30d1
- All mentions10
- First seenAug 17, 2026
- Last mentioned2d ago
Timeline
10 articles · newest firstOxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments
DOJ charged Oxygen Forensics leaders for hiding Russian ownership while selling forensic tools to US and European agencies.
74
UK Council Attack Linked to Mass Exploitation of SonicWall Flaw
Hunt.io links a UK council attack to mass exploitation of SonicWall SMA1000 flaw CVE-2026-15409 (CVSS 10.0), enabling credential and Active Directory theft.
90
International Operation Disrupts Sality P2P Botnet
US-led international operation with Europol, CrowdStrike, and Shadowserver sinkholed the 20-year-old Sality P2P botnet, once exceeding one million infected machines.
62
Dogged Russia-based botnet dismantled after 23-year run
Law enforcement, CrowdStrike and Shadowserver dismantled the 23-year-old Sality P2P botnet that infected more than 11 million devices.
72
Sality, one of the longest
US and European authorities, with CrowdStrike and Shadowserver, disrupted the 20-year-old Sality peer-to-peer botnet, severing 15,000+ infected machines from operators.
52
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
US and European authorities with CrowdStrike dismantled the two-decade-old Sality P2P botnet using peer-list manipulation, blocking payload delivery to infected hosts.
62
Global sinkhole operation ends Sality botnet’s 23-year run
Law enforcement, CrowdStrike, and Shadowserver sinkholed the 23-year-old Sality P2P botnet, cutting 15,000+ infected machines from its operator.
65
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
Law enforcement and CrowdStrike disrupted the 23-year-old Sality P2P botnet, isolating 15,000+ infected machines and seizing linked domains.
72
Automatically Detecting DNS Hijacking in Passive DNS
Unit 42's machine learning pipeline detected 6,729 DNS hijacking events between March and September 2024, hitting political parties, ISPs, and universities.
45
Related CVEs
by mentions- CVE-2026-154097%10.0Unauthenticated SSRF in SonicWall SMA1000 Appliances
Appears with
- Salitymalware · 6
- CrowdStrikevendor · 6
- Shadowserver Foundationvendor · 5
- EggJaggermalware · 4
- CrowdStrikeorganization · 3
- Salityproduct · 3
- Europolorganization · 3
- Shadowserver Foundationorganization · 3
- U.S. Department of Justiceorganization · 3
- Sality operatorsthreat actor · 2
- US Justice Departmentorganization · 2
- EggJaggerproduct · 2
- FBIorganization · 2
- US Department of Justiceorganization · 2
- Cortex XSIAMproduct · 1
- Dragosvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.