“cti_fyi” — Fediverse search results on home.social

CTI.FYI @cti_fyi

2026-10-26

🚨New ransom group blog post!🚨

Group name: Whitearmor
Post title: J.B Hunt
Organization: J.B. Hunt
Location: 🇺🇸 US
Sector: Other
Info: https://cti.fyi/#disclosure/Whitearmor/J.B%20Hunt

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

🚨New ransom group blog posts!🚨

Group name: payload
Post title: Edelstahl-Mechanik GmbH
Location: 🇩🇪 DE
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/payload/Edelstahl-Mechanik%20GmbH

Group name: payload
Post title: Miletic GmbH
Location: 🇩🇪 DE
Sector: Construction
Info: https://cti.fyi/#disclosure/payload/Miletic%20GmbH

Group name: payload
Post title: Glückauf-Vermessung GmbH
Location: 🇩🇪 DE
Sector: Professional Services
Info: https://cti.fyi/#disclosure/payload/Gl%C3%BCckauf-Vermessung%20GmbH

Group name: Panzer
Post title: Samples.zip
Info: https://cti.fyi/#disclosure/Panzer/Samples.zip

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

New on the CTI.FYI Blog:

This Week in Ransomware: October 18, 2026 to October 25, 2026

During the 7-day period from October 18, 2026 to October 25, 2026, CTI.FYI tracked 275 new victim disclosures across the darknet. N0n led total victim volume with 92 claims, while Logistics & Transportation emerged as the most targeted sector.

Read the full report: https://cti.fyi/blog/this-week-in-ransomware-2026-10-18-to-2026-10-25.html

#ransomware #threatintel #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

🚨New ransom group blog post!🚨

Group name: kazu
Post title: HOY-VOY: Driving Education Platform
Location: 🇪🇸 ES
Sector: Education
Info: https://cti.fyi/#disclosure/kazu/HOY-VOY%3A%20Driving%20Education%20Platform

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

🚨New ransom group blog posts!🚨

Group name: anubis
Post title: Newcomer Cremations, Funerals & Receptions
Sector: Professional Services
Info: https://cti.fyi/#disclosure/anubis/Newcomer%20Cremations%2C%20Funerals%20%26%20Receptions

Group name: Whitearmor
Post title: https://x.com/WhiteArmorxd
Info: https://cti.fyi/#disclosure/Whitearmor/https%3A%2F%2Fx.com%2FWhiteArmorxd

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

🚨New ransom group blog posts!🚨

Group name: qilin
Post title: Hossner-Textil GmbH
Location: 🇩🇪 DE
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/qilin/Hossner-Textil%20GmbH

Group name: qilin
Post title: White & Case
Location: 🇺🇸 US
Sector: Legal
Info: https://cti.fyi/#disclosure/qilin/White%20%26%20Case

Group name: qilin
Post title: Ooredoo Myanmar
Location: 🇲🇲 MM
Sector: Telecommunications
Info: https://cti.fyi/#disclosure/qilin/Ooredoo%20Myanmar

Group name: Falcon
Post title: Weitz & Luxenberg
Location: 🇺🇸 US
Sector: Professional Services
Info: https://cti.fyi/#disclosure/Falcon/Weitz%20%26%20Luxenberg

Group name: Falcon
Post title: Astrana Health
Location: 🇺🇸 US
Sector: Healthcare
Info: https://cti.fyi/#disclosure/Falcon/Astrana%20Health

Group name: Whitearmor
Post title: Partido Liberal
Location: 🇧🇷 BR
Sector: Government & Public Sector
Info: https://cti.fyi/#disclosure/Whitearmor/Partido%20Liberal

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

🚨New ransom group blog post!🚨

Group name: Emperador
Post title: A-RMS
Info: https://cti.fyi/#disclosure/Emperador/A-RMS

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

🚨New ransom group blog posts!🚨

Group name: qilin
Post title: ECOM
Organization: ECOM Agriculture Company
Sector: Agriculture & Food
Info: https://cti.fyi/#disclosure/qilin/ECOM

Group name: Emperador
Post title: AyT COMPUTERS SRL
Location: 🇮🇹 IT
Sector: Technology
Info: https://cti.fyi/#disclosure/Emperador/AyT%20COMPUTERS%20SRL

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

🚨New ransom group blog post!🚨

Group name: qilin
Post title: ETO
Organization: ETO Industries
Location: 🇺🇸 US
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/qilin/ETO

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-25

🚨New ransom group blog posts!🚨

Group name: bravox
Post title: Barrow & Grimm 🇺🇸
Organization: Barrow & Grimm
Location: 🇺🇸 US
Sector: Legal
Info: https://cti.fyi/#disclosure/bravox/Barrow%20%26%20Grimm%20%F0%9F%87%BA%F0%9F%87%B8

Group name: bravox
Post title: AMSAM 🇫🇷
Organization: AMSAM
Location: 🇫🇷 FR
Info: https://cti.fyi/#disclosure/bravox/AMSAM%20%F0%9F%87%AB%F0%9F%87%B7

Group name: N0n
Post title: Andrews Advisory Group LLC
Location: 🇺🇸 US
Sector: Financial Services
Info: https://cti.fyi/#disclosure/N0n/Andrews%20Advisory%20Group%20LLC

Group name: N0n
Post title: Keidel Supply Company Incorporated
Location: 🇺🇸 US
Sector: Other
Info: https://cti.fyi/#disclosure/N0n/Keidel%20Supply%20Company%20Incorporated

Group name: N0n
Post title: Mach Law APC (San Diego family law and divorce practice)
Organization: Mach Law APC
Location: 🇺🇸 US
Sector: Legal
Info: https://cti.fyi/#disclosure/N0n/Mach%20Law%20APC%20%28San%20Diego%20family%20law%20and%20divorce%20practice%29

Group name: N0n
Post title: Pure Grow Diamonds Inc.
Location: 🇺🇸 US
Sector: Other
Info: https://cti.fyi/#disclosure/N0n/Pure%20Grow%20Diamonds%20Inc.

Group name: N0n
Post title: Technoleads Services Inc.
Location: 🇨🇦 CA
Sector: Media & Entertainment
Info: https://cti.fyi/#disclosure/N0n/Technoleads%20Services%20Inc.

Group name: N0n
Post title: TOPLIVO AD
Location: 🇧🇬 BG
Sector: Energy & Utilities
Info: https://cti.fyi/#disclosure/N0n/TOPLIVO%20AD

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @[email protected]

2026-10-25

🚨New ransom group blog posts!🚨

Group name: Emperador
Post title: AB InBev
Location: 🇧🇪 BE
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Emperador/AB%20InBev

Group name: Whitearmor
Post title: Hisense
Location: 🇨🇳 CN
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/Whitearmor/Hisense

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-24

🚨New ransom group blog posts!🚨

Group name: lamashtu
Post title: Vins Viallet
Location: 🇫🇷 FR
Sector: Other
Info: https://cti.fyi/#disclosure/lamashtu/Vins%20Viallet

Group name: lamashtu
Post title: VERGI Muenster
Location: 🇩🇪 DE
Sector: Technology
Info: https://cti.fyi/#disclosure/lamashtu/VERGI%20Muenster

Group name: lamashtu
Post title: Gräfliches Hofbrauhaus Freising
Location: 🇩🇪 DE
Sector: Agriculture & Food
Info: https://cti.fyi/#disclosure/lamashtu/Gr%C3%A4fliches%20Hofbrauhaus%20Freising

Group name: lamashtu
Post title: WEPOS Chemie
Location: 🇩🇪 DE
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/lamashtu/WEPOS%20Chemie

Group name: lamashtu
Post title: MECA-PRECIS
Sector: Manufacturing
Info: https://cti.fyi/#disclosure/lamashtu/MECA-PRECIS

Group name: lamashtu
Post title: FuG-Gruppe
Location: 🇩🇪 DE
Sector: Technology
Info: https://cti.fyi/#disclosure/lamashtu/FuG-Gruppe

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-24

🚨New ransom group blog post!🚨

Group name: securotrop
Post title: Synergy Engeneering
Location: 🇺🇸 US
Sector: Professional Services
Info: https://cti.fyi/#disclosure/securotrop/Synergy%20Engeneering

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-24

🚨New ransom group blog post!🚨

Group name: qilin
Post title: Castle Howard Estate
Location: 🇬🇧 GB
Sector: Hospitality & Tourism
Info: https://cti.fyi/#disclosure/qilin/Castle%20Howard%20Estate

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-24

🚨New ransom group blog posts!🚨

Group name: qilin
Post title: Heber City, UT
Organization: Heber City Government
Location: 🇺🇸 US
Sector: Government & Public Sector
Info: https://cti.fyi/#disclosure/qilin/Heber%20City%2C%20UT

Group name: Emperador
Post title: Frommann Energie GmbH
Location: 🇩🇪 DE
Sector: Energy & Utilities
Info: https://cti.fyi/#disclosure/Emperador/Frommann%20Energie%20GmbH

Group name: Emperador
Post title: Phoenix S&S GmbH
Location: 🇩🇪 DE
Info: https://cti.fyi/#disclosure/Emperador/Phoenix%20S%26S%20GmbH

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-24

🚨New ransom group blog post!🚨

Group name: qilin
Post title: SLTN Inter Access
Sector: Professional Services
Info: https://cti.fyi/#disclosure/qilin/SLTN%20Inter%20Access

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-24

🚨New ransom group blog posts!🚨

Group name: kazu
Post title: Rand Mutual Assurance: Workers’ Compensation Services
Location: 🇿🇦 ZA
Sector: Financial Services
Info: https://cti.fyi/#disclosure/kazu/Rand%20Mutual%20Assurance%3A%20Workers%E2%80%99%20Compensation%20Services

Group name: kazu
Post title: MINESURSI DRC: Teacher Registration Platform
Location: 🇨🇩 CD
Sector: Government & Public Sector
Info: https://cti.fyi/#disclosure/kazu/MINESURSI%20DRC%3A%20Teacher%20Registration%20Platform

Group name: kazu
Post title: PGR Mozambique: Public Justice System
Organization: Public Justice System of Mozambique (Procuradoria‑Geral da República)
Location: 🇲🇿 MZ
Sector: Government & Public Sector
Info: https://cti.fyi/#disclosure/kazu/PGR%20Mozambique%3A%20Public%20Justice%20System

#ransomware #cti #threatintelligence #cybersecurity #infosec

CTI.FYI @cti_fyi

2026-10-24

🚨New ransom group blog posts!🚨

Group name: N0n
Post title: Arthritis Center of Riverside
Location: 🇺🇸 US
Sector: Healthcare
Info: https://cti.fyi/#disclosure/N0n/Arthritis%20Center%20of%20Riverside

Group name: N0n
Post title: Adirondack Networks, Inc.
Location: 🇺🇸 US
Sector: Technology
Info: https://cti.fyi/#disclosure/N0n/Adirondack%20Networks%2C%20Inc.

Group name: N0n
Post title: Asisken Asistencia Médica S.A.
Location: 🇪🇨 EC
Sector: Healthcare
Info: https://cti.fyi/#disclosure/N0n/Asisken%20Asistencia%20M%C3%A9dica%20S.A.

Group name: N0n
Post title: GPIC Projectos Con Instalacoes Lda
Location: 🇵🇹 PT
Sector: Professional Services
Info: https://cti.fyi/#disclosure/N0n/GPIC%20Projectos%20Con%20Instalacoes%20Lda

Group name: N0n
Post title: Texcar Inc.
Location: 🇺🇸 US
Sector: Other
Info: https://cti.fyi/#disclosure/N0n/Texcar%20Inc.

#ransomware #cti #threatintelligence #cybersecurity #infosec

Alexandre Dulaunoy @[email protected]

2026-10-25

A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick.

Upgraded to Pivotick to v3 and add graph simplification tools and table export.

:github: https://github.com/adulau/threat-actor-explorer
🌍️ Online version https://foo.be/threat-actor-explorer/misp-threat-actor-explorer.html

#cti #misp #threatintel #threatintelligence #opensource

VulDB :verified: @vuldb

2026-10-25

🚨 Our CTI team identified a lot of activities targeting Firecrawl (CVE-2026-116066) https://vuldb.com/vuln/426200/cti

VulDB :verified: @vuldb

2026-10-25

🚨 Our CTI team identified a lot of activities targeting GeoDirectory Plugin (CVE-2026-113489) https://vuldb.com/vuln/426070/cti

Alexandre Dulaunoy @[email protected]

2026-10-26

Reimplemented the cool binGraph idea in a misp-modules (it will be in the next release). Showing the entropy over the addresses and the distribution of values.

https://github.com/MISP/misp-modules/pull/1011

#misp #cti #malware #threatintel #threatintelligence

VulDB :verified: @[email protected]

2026-10-26

📡 We have added indicators: XWorm (+1), Havoc (+1), Remcos (+1), Bashlite (+1), Hajime (+1), SmartLoader (+1) and XMRIG (+1). https://vuldb.com/actor #apt #cti #ioc

#apt #cti #ioc

VulDB :verified: @[email protected]

2026-10-25

📡 We have updated indicators: NjRAT (+1), MopsStealer (+1), PerlBot (+1), Prometei (+2), Quasar RAT (+1), Meterpreter (+1) and CloudEyE (+1). https://vuldb.com/actor #apt #cti #ioc

#apt #cti #ioc

VulDB :verified: @[email protected]

2026-10-24

📡 We have updated these actors: Grandoreiro (+8), Jackskid (+5), SalatStealer (+2), Havoc (+1), AsyncRAT (+1), HijackLoader (+1) and Remus (+1). https://vuldb.com/actor #apt #cti #ioc