57
Search: “Cyble Research and Intelligence Labs”
30 items
30
60
30
60
57
30
30
42
45
60
30
30
30
Ransomware Threats in the Americas H1 2026: Dissecting the Regional Attack Patterns and Dominant Actors
Cyble's H1 2026 report attributes 2,188 of 3,836 global ransomware attacks (57%) to the Americas, with North America absorbing 1,981 incidents.
Cyble Research and Intelligence Labs tracked 3,836 ransomware incidents worldwide in the first half of 2026, with North and South America combining for 2,188 attacks, more than 57% of the global total. North America alone accounted for 1,981 attacks, driven by a mature multi-group Ransomware-as-a-Service economy competing for market share. The report dissects regional attack patterns and profiles the dominant ransomware actors across the two sub-regions.
42
30
30
55
60
57
30
60
57
60
30
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
60
55
60
Atomic macOS (AMOS) Stealer Activity
Unit 42 details an August 2026 AMOS macOS stealer infection delivered via fake 'macOS toolkit' pages and Terminal paste commands, exfiltrating credentials to C2.
Unit 42 analyzed an AMOS (Atomic macOS Stealer) infection from August 5, 2026, initiated via a page at getmacouscloud[.]com instructing users to paste a command into Terminal. The command fetched a Zsh script from ferncore13[.]com that delivered a Mach-O installer to /tmp/helper and supporting files under /Library/Application Support/.com.apple.accountsd/ and .com.apple.metadata.mds/. AMOS collected browser data, credentials, cryptocurrency wallets (Binance, TonKeeper), Telegram data, and FileGrabber content such as AWS and gcloud files, uploading it via HTTP POST to C2 server 161.35.146[.]120. AMOS has been advertised on Telegram since April 2024 and distributed via ClickFix campaigns, malicious ads, and cracked-software sites.
45
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit
60