Predator Spyware Resurgence: Insikt Group Exposes New Global InfrastructureRecorded Future·Aug 15, 00:00 UTC · Aug 15, 2024Malware30
From CastleLoader to CastleRAT: TAG-150 Advances Operations with MultiRecorded Future·Jun 22, 00:00 UTC · Jun 22, 2025Malware30
Spyware Vendors' Nebulous Ecosystem Helps Them Evade SanctionsInfosecurity Magazine·Sep 6, 14:30 UTC · Sep 6, 2024Malware30
Hackers Leveraging Cloudflare Tunnels, DNS FastThe Hacker News·Jun 29, 11:13 UTC · Jun 29, 2026Malware42
Russian Scammers Target Crypto Influencers with InfostealersInfosecurity Magazine·Jan 24, 12:15 UTC · Jan 24, 2025Malware30
Russian and Chinese Hacking Communities: A Look InsideRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Malware30
Threat Activity Group RedFoxtrot Linked to China’s PLA Unit 69010; Targets Bordering Asian CountriesRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware42
"Beijing One Pass" Employee Software Exhibits Spyware CharacteristicsRecorded Future·Aug 20, 00:00 UTC · Aug 20, 2025Malware42
TAG-195 Upgrades MaaS Ecosystem with Modular ToolsRecorded Future·May 14, 00:00 UTC · May 14, 2026Malware42
Predator spotted in Mozambique for first time, another sign of spyware’s availabilityThe Record·Jun 12, 17:06 UTC · Jun 12, 2025Malware30
North Korean hackers spoof venture capital firms in Japan, Vietnam and USThe Record·Jun 6, 14:48 UTC · Jun 6, 2023Malware30
GrayBravo’s CastleLoader Activity Clusters Target Multiple IndustriesRecorded Future·Oct 9, 00:00 UTC · Oct 9, 2025Malware30
Tracking Candiru’s DevilsTongue Spyware in Multiple CountriesRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware130
APT28 targets key networks in Europe with HeadLace malwareSecurity Affairs·Jun 3, 09:55 UTC · Jun 3, 2024Malware55
Scanbox Watering Hole Targets Pakistani and Tibetan Government Website VisitorsRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware30
Pro-Houthi hacking group linked to spyware operation on Arabian PeninsulaCyberScoop·May 16, 13:00 UTC · May 16, 2023Malware in the wild60
Russian Actors Weaponize Legitimate Services in MultiInfosecurity Magazine·May 14, 15:00 UTC · May 14, 2024Malware30
Russia-Linked Hackers Target Tajikistan Government with Weaponized Word DocumentsThe Hacker News·May 27, 06:54 UTC · May 27, 2025Malware42
Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon SpywareThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware in the wildCVE-2025-43200CVE-2025-2420060
BlueBravo Uses Ambassador Lure to Deploy GraphicalNeutrino MalwareRecorded Future·Aug 21, 00:00 UTC · Aug 21, 2025Malware42
Overview of the 9 Distinct Data Wipers Used in the Ukraine WarRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware42
Chinese hackers targeted at least 17 countries across Asia, Europe and North AmericaThe Record·Aug 8, 17:56 UTC · Aug 8, 2023Malware55
China-Linked Group TAG-28 Targets India’s “The Times Group” and UIDAI (Aadhaar) Government Agency With Winnti MalwareRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Malware55
Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News SitesThe Hacker News·Nov 26, 04:46 UTC · Nov 26, 2024Malware30
Mirai-Variant IoT Botnet Used to Target Financial Sector in January 2018Recorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware30
GrayCharlie Hijacks Law Firm Sites in Suspected SupplyRecorded Future·Aug 29, 00:00 UTC · Aug 29, 2025Malware42
Dark Web Malware Logs Expose 3,300 Users Linked to Child Abuse SitesThe Hacker News·Jul 9, 08:49 UTC · Jul 9, 2024Malware30
HermeticWiper and PartyTicket Targeting Computers in UkraineRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Malware42
Behind the Curtain: How Lumma Affiliates OperateRecorded Future·Nov 28, 00:00 UTC · Nov 28, 2025Malware55
The Use of Counterfeit Code Signing Certificates Is on the RiseRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Malware42
RedDelta Targets European Government Organizations and Continues to Iterate Custom PlugX VariantRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware42
GrayAlpha Unmasked: New FIN7-Linked Infrastructure, PowerNet Loader, and Fake Update AttacksRecorded Future·Jul 4, 00:00 UTC · Jul 4, 2024Malware55
Apple Drops Spyware Case Against NSO Group, Citing Risk of Threat Intelligence ExposureThe Hacker News·Oct 1, 02:10 UTC · Oct 1, 2024Malware55
Russian state hackers abuse Cloudflare services to spy on Ukrainian targetsThe Record·Dec 5, 18:40 UTC · Dec 5, 2024Malware42
MintsLoader Malware Analysis: Multi-Stage Loader Used by TAGRecorded Future·Apr 20, 00:00 UTC · Apr 20, 2025Malware42
Special Delivery: Recorded Future Hunting PackagesRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Malware30
Predator Spyware Operators Rebuild Multi-Tier Infrastructure to Target Mobile DevicesRecorded Future·Dec 22, 00:00 UTC · Dec 22, 2023Malware30
Operation Gamework: Infrastructure Overlaps Found Between BlueAlpha and Iranian APTsRecorded Future·Jul 31, 00:00 UTC · Jul 31, 2025Malware42
Cyber Attacks on NGOs: The Underreported Threat to Global Humanitarian WorkRecorded Future·Jul 31, 00:00 UTC · Jul 31, 2025Malware30