Lazarus APT steals cryptocurrency and user data via a decoy MOBA gameKaspersky Securelist·Oct 23, 11:00 UTC · Oct 23, 2024Threat actorCVE-2024-494760
DarkCasino joins the list of APT groups exploiting WinRAR 0daySecurity Affairs·Nov 20, 09:09 UTC · Nov 20, 2023Threat actorCVE-2023-3883160
How North Korea Revolutionized the Internet as a Tool for Rogue RegimesRecorded Future·Apr 23, 00:00 UTC · Apr 23, 2019Threat actor60
North Korean Hackers Amass $3bn in Cryptocurrency HeistsInfosecurity Magazine·Nov 30, 16:30 UTC · Nov 30, 2023Threat actor60
Other 3,700 MikroTik Routers compromised in cryptoJacking campaignsSecurity Affairs·Sep 11, 06:32 UTC · Sep 11, 2018Threat actorCVE-2018-1484760
Cryptojacking campaign targets addCyberScoop·Sep 14, 19:39 UTC · Sep 14, 2018Threat actor in the wild60
Threat actors exploiting Twitter changes after Musk takeover, research showsThe Record·Jan 9, 00:00 UTC · Jan 9, 2023Threat actor60
Hundreds of thousands MikroTik Routers involved in cryptomining campaignSecurity Affairs·Aug 3, 07:00 UTC · Aug 3, 2018Threat actor60
Crooks target Kubernetes installs via Argo Workflows to deploy minersSecurity Affairs·Jul 25, 15:23 UTC · Jul 25, 2021Threat actor60
Lazarus APT hackers leverages HWP Documents in a recent string of attacksSecurity Affairs·Jun 26, 04:44 UTC · Jun 26, 2018Threat actor60
Peanut butter and ProtonMail: US charges underscore evolution of espionage in digital ageCyberScoop·Oct 11, 19:59 UTC · Oct 11, 2021Threat actor in the wild60
Previously unreported North Korean espionage part of busy 2021 for country's hackersCyberScoop·Nov 18, 10:00 UTC · Nov 18, 2021Threat actor in the wild60
How Threat Actors Are Rizzing Up Your AI for ProfitRecorded Future·Jul 20, 00:00 UTC · Jul 20, 2026Threat actor160
Money mule networks evolve into hierarchical, business-like criminal enterprisesHelp Net Security·Jun 27, 00:00 UTC · Jun 27, 2025Threat actor60
Wormable XMRig Campaign Uses BYOVD Exploit and TimeThe Hacker News·Feb 24, 11:56 UTC · Feb 24, 2026Threat actorCVE-2020-14979CVE-2025-5518260
North Korea-linked Lazarus APT uses Log4J to target VMware serversSecurity Affairs·May 23, 18:20 UTC · May 23, 2022Threat actorCVE-2021-4422860
FBI Charges 6, Seizes 48 Domains Linked to DDoS-forThe Hacker News·Dec 18, 03:30 UTC · Dec 18, 2022Threat actor60
Phemedrone campaign exploits Windows smartScreen bypassSecurity Affairs·Jan 15, 14:25 UTC · Jan 15, 2024Threat actorCVE-2023-3602560
Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploitedHelp Net Security·Jun 28, 00:00 UTC · Jun 28, 2026Threat actor in the wildCVE-2026-2023060
⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & MoreThe Hacker News·Nov 3, 17:59 UTC · Nov 3, 2025Threat actorCVE-2025-61932CVE-2025-55315CVE-2025-10680+18 CVEs160
How Telegram found itself in the middle of the war between Russia and UkraineThe Record·Jan 17, 00:00 UTC · Jan 17, 2023Threat actor60
Threat actors are stealing funds from General Bytes Bitcoin ATMSecurity Affairs·Aug 21, 17:40 UTC · Aug 21, 2022Threat actor in the wild60
⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & MoreThe Hacker News·Jan 12, 16:26 UTC · Jan 12, 2026Threat actorCVE-2026-21858CVE-2025-22224CVE-2025-22225+1 CVEs60
Threat actors exploit Atlassian Confluence bug in cryptomining campaignsSecurity Affairs·Aug 30, 08:12 UTC · Aug 30, 2024Threat actor in the wildCVE-2023-2252760
Carlos Torales Montero joins Cloudflare as VP, Head of Sales Latin AmericaHelp Net Security·May 10, 00:00 UTC · May 10, 2022Threat actor60
Lazarus Group Exploits Google Chrome Flaw in New CampaignInfosecurity Magazine·Oct 24, 17:00 UTC · Oct 24, 2024Threat actorCVE-2024-494760
Wormable XMRig campaign leverages BYOVD and timed kill switch for stealthSecurity Affairs·Feb 23, 18:36 UTC · Feb 23, 2026Threat actor60
A cascade of compromise: unveiling Lazarus' new campaignKaspersky Securelist·Oct 27, 05:41 UTC · Oct 27, 2023Threat actor160
North Korean hackers target open-source repositories in new espionage campaignThe Record·Jul 31, 14:39 UTC · Jul 31, 2025Threat actor in the wild60
Monero scam was at the center of Trump campaign website defacementCyberScoop·Oct 28, 13:49 UTC · Oct 28, 2020Threat actor in the wild60
New Cryptocurrency Mining Campaign Targets Linux Systems and IoT DevicesThe Hacker News·Jan 10, 14:58 UTC · Jan 10, 2024Threat actor in the wild60
#Infosec2024: Why Cybersecurity is Vital for the 2024 Paris OlympicsInfosecurity Magazine·May 31, 10:00 UTC · May 31, 2024Threat actor60
Threat actors use CVE-2021Security Affairs·Sep 30, 09:17 UTC · Sep 30, 2021Threat actorCVE-2021-2608460
Lazarus Group Targets macOS in Supply Chain AssaultInfosecurity Magazine·Sep 11, 17:00 UTC · Sep 11, 2023Threat actor60
Chinese Antivirus Firm Was Part of APT41 ‘Supply Chain’ AttackKrebs on Security·Sep 17, 22:16 UTC · Sep 17, 2020Threat actor60
Nation-state groups hit hundreds of organizations with Microsoft Windows zeroCyberScoop·Mar 20, 14:07 UTC · Mar 20, 2025Threat actor in the wild60
Lazarus APT updates its toolset in watering hole attacksKaspersky Securelist·Apr 24, 05:00 UTC · Apr 24, 2025Threat actor60
Week in review: MUT-1244 targets both security workers and threat actors, Kali Linux 2024.4 releasedHelp Net Security·Dec 22, 00:00 UTC · Dec 22, 2024Threat actorCVE-2024-1235660