Search: “threat actors”

5,723 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 5759 Malware 5732 Vulnerability 4091 Threat actor 3370 Exploit / PoC 2426 Data breach 2272 Phishing & fraud 1030 Policy & legal 571 Industry 168 AI safety & security 112 Advisory 105 Research 45 Tools 25 AI tools & infra 23

SeverityAll critical 10516 high 9328 medium 4489 low 1262 info 166

Targeted mobile implants in the age of cyber

Kaspersky SecurelistJan 18, 10:57 UTC · Jan 18, 2016Malware

30

New Zardoor backdoor used in long-term cyber espionage operation targeting an Islamic organization

Cisco TalosFeb 8, 14:10 UTC · Feb 8, 2024Malware

42

MoonPeak malware from North Korean actors unveils new details on attacker infrastructure

Cisco TalosAug 21, 10:00 UTC · Aug 21, 2024Malware

42

Tria stealer targets Android users for SMS exfiltration and financial gain

Kaspersky SecurelistJan 30, 08:00 UTC · Jan 30, 2025Malware

30

DeathStalker targets legal entities with new Janicab variant

Kaspersky SecurelistDec 9, 09:30 UTC · Dec 9, 2022Malware

30

Attack Campaign on the Government of Thailand Delivers Bookworm Trojan

Palo Alto Unit 42Nov 1, 09:57 UTC · Nov 1, 2018Malware

30

GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries

Recorded FutureOct 9, 00:00 UTC · Oct 9, 2025Malware

30

SapphireStealer: Open-source information stealer enables credential and data theft

Cisco TalosAug 31, 12:00 UTC · Aug 31, 2023Malware

42

APT trends report Q3 2023

Kaspersky SecurelistOct 17, 08:50 UTC · Oct 17, 2023Malware

42

Highlighting TA866/Asylum Ambuscade Activity Since 2021

Cisco TalosOct 23, 10:02 UTC · Oct 23, 2024Malware

42

UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

Cisco TalosJul 16, 10:00 UTC · Jul 16, 2026Malware

30

Operation Gamework: Infrastructure Overlaps Found Between BlueAlpha and Iranian APTs

Recorded FutureJul 31, 00:00 UTC · Jul 31, 2025Malware

42

Malware report for Q3 2024: threat overview

Kaspersky SecurelistNov 29, 10:45 UTC · Nov 29, 2024Malware

42

Uncovering Hidden Malware with No Distribute Scanners

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Malware

30

APT trends report Q2 2022

Kaspersky SecurelistJul 28, 08:39 UTC · Jul 28, 2022Malware

42

Who is Responsible and Does it Matter?

Cisco TalosMar 6, 19:03 UTC · Mar 6, 2025Malware

42

EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

The Hacker NewsJun 7, 15:47 UTC · Jun 7, 2026Malware1

55

APT trends report Q1 2023

Kaspersky SecurelistApr 27, 10:00 UTC · Apr 27, 2023Malware

42

Common TTPs of attacks against industrial organizations

Kaspersky SecurelistAug 10, 08:00 UTC · Aug 10, 2023Malware

42

Kaspersky report on APT trends in Q1 2024

Kaspersky SecurelistMay 7, 13:19 UTC · May 7, 2024Malware

42

Ding! Your RAT has been delivered

Cisco TalosJul 8, 10:49 UTC · Jul 8, 2015Malware

42

Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations

The Hacker NewsJan 19, 06:53 UTC · Jan 19, 2026Malware

30

Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader Malware

Security AffairsJan 31, 11:45 UTC · Jan 31, 2024Malware CVE-2023-46805 CVE-2024-21887

60

Public report on attacks in Middle East we attribute to WIRTE APT

Kaspersky SecurelistNov 29, 08:00 UTC · Nov 29, 2021Malware

42

TwoFace Webshell: Persistent Access Point for Lateral Movement

Palo Alto Unit 42Nov 1, 10:54 UTC · Nov 1, 2018Malware

30

Threat actor abuses Gophish to deliver new PowerRAT and DCRAT

Cisco TalosOct 22, 10:00 UTC · Oct 22, 2024Malware

30

Suspected CoralRaider continues to expand victimology using three information stealers

Cisco TalosApr 23, 12:42 UTC · Apr 23, 2024Malware

30

High-profile malware and targeted attacks in Q1 2023

Kaspersky SecurelistJun 7, 08:00 UTC · Jun 7, 2023Malware

42

Malware Analysis: Trickbot

The Hacker NewsMay 24, 11:06 UTC · May 24, 2022Malware

42

Threat actors use copyright infringement phishing lure to deploy infostealers

Cisco TalosOct 31, 13:37 UTC · Oct 31, 2024Malware

30

Chinese threat actors use Quad7 botnet in password

Security AffairsNov 3, 10:09 UTC · Nov 3, 2024Malware

42

Get a Loda This: LodaRAT meets new friends

Cisco TalosNov 17, 13:01 UTC · Nov 17, 2022Malware

30

Threat actors use Quantum Builder to deliver Agent Tesla malware

Security AffairsSep 28, 15:43 UTC · Sep 28, 2022Malware

42

Dissecting UAT-8099: New persistence mechanisms and regional focus

Cisco TalosJan 29, 11:00 UTC · Jan 29, 2026Malware

55

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

The Hacker NewsMay 31, 12:13 UTC · May 31, 2026Malware CVE-2026-35616

60

Hidden between the tags: Insights into spammers’ evasion techniques in HTML Smuggling

Cisco TalosJul 10, 12:00 UTC · Jul 10, 2024Malware

42

Tusk campaign uses infostealers and clippers for financial gain

Kaspersky SecurelistAug 15, 12:00 UTC · Aug 15, 2024Malware

30

The OilRig Campaign: Attacks on Saudi Arabian Organizations Deliver Helminth Backdoor

Palo Alto Unit 42Nov 1, 10:15 UTC · Nov 1, 2018Malware

42

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

Bumblebee, a new loader used by multiple crimeware threat actors

Security AffairsApr 28, 14:49 UTC · Apr 28, 2022Malware

42