#threatactors — Public Fediverse posts

Ripple Just Made It Harder for North Korea to Hide Inside Crypto Firms https://www.byteseu.com/1992013/ #Conflicts #CryptoISAC #DemocraticPeople'sRepublicOfKorea #DigitalAssets #DPRK #IndicatorsOfCompromise #NorthKorea #Ripple #TheDrift #ThreatActors #ThreatIntelligence

Phishing Attacks Exploit Amazon SES to Evade Detection

Kaspersky researchers have uncovered a surge in phishing attacks that cleverly exploit Amazon's trusted email service to evade detection. By using valid Amazon SES credentials, attackers can send convincing phishing messages that slip past standard security checks.

https://osintsights.com/phishing-attacks-exploit-amazon-ses-to-evade-detection?utm_source=mastodon&utm_medium=social

#PhishingAttacks #AmazonSes #CloudServices #EmailSecurity #ThreatActors

Attackers Exploit Amazon SES to Bypass Email Security in Phishing Campaigns

Phishing campaigns are now using Amazon's Simple Email Service to make malicious messages look legit, bypassing standard email security checks and putting victims at risk of revealing sensitive data. By exploiting Amazon SES's trusted reputation and authentication features, attackers are making it harder to spot phishing emails.

https://osintsights.com/attackers-exploit-amazon-ses-to-bypass-email-security-in-phishing-campaigns?utm_source=mastodon&utm_medium=social

#Phishing #AmazonSes #EmailSecurity #CloudServices #ThreatActors

Threat Actors Formalize Operational Security Playbook

Cybercrime players are now treating operational security as a sophisticated game-changer, and it's time for you to level up your security strategy beyond just using VPNs. A battle-tested three-tier infrastructure model has emerged, separating exposure, execution, and monetization to safeguard high-stakes operations.

https://osintsights.com/threat-actors-formalize-operational-security-playbook?utm_source=mastodon&utm_medium=social

#OperationalSecurity #CardingOperations #ThreatActors #Vpns #Cybercrime

CALL FOR PAPERS OPEN for Adversary Village at DEF CON 34!
We are looking for Talks, Workshops, Tool Demos, and Hands-on Activities focused strictly on adversary simulation, threat emulation, offensive tradecraft, threat-informed defense, offensive cyber security, state-sponsored threat actors, purple teaming, and real-world attacker techniques. Vendor-neutral, technical, and practical content only.
Submit your research here: https://adversaryvillage.org/call-for-papers/
CFP Closes on: 31st May 2026
#DEFCON34 #AdversaryVillage
#OffensiveCyberSecurity #AdversarySimulation #PurpleTeam #ThreatActors #Breaches #DEFCON

CALL FOR PAPERS OPEN for Adversary Village at DEF CON 34!
We are looking for Talks, Workshops, Tool Demos, and Hands-on Activities focused strictly on adversary simulation, threat emulation, offensive tradecraft, threat-informed defense, offensive cyber security, state-sponsored threat actors, purple teaming, and real-world attacker techniques. Vendor-neutral, technical, and practical content only.
Submit your research here: https://adversaryvillage.org/call-for-papers/
CFP Closes on: 31st May 2026
#DEFCON34 #AdversaryVillage
#OffensiveCyberSecurity #AdversarySimulation #PurpleTeam #ThreatActors #Breaches #DEFCON

CALL FOR PAPERS OPEN for Adversary Village at DEF CON 34!
We are looking for Talks, Workshops, Tool Demos, and Hands-on Activities focused strictly on adversary simulation, threat emulation, offensive tradecraft, threat-informed defense, offensive cyber security, state-sponsored threat actors, purple teaming, and real-world attacker techniques. Vendor-neutral, technical, and practical content only.
Submit your research here: https://adversaryvillage.org/call-for-papers/
CFP Closes on: 31st May 2026
#DEFCON34 #AdversaryVillage
#OffensiveCyberSecurity #AdversarySimulation #PurpleTeam #ThreatActors #Breaches #DEFCON

CALL FOR PAPERS OPEN for Adversary Village at DEF CON 34!
We are looking for Talks, Workshops, Tool Demos, and Hands-on Activities focused strictly on adversary simulation, threat emulation, offensive tradecraft, threat-informed defense, offensive cyber security, state-sponsored threat actors, purple teaming, and real-world attacker techniques. Vendor-neutral, technical, and practical content only.
Submit your research here: https://adversaryvillage.org/call-for-papers/
CFP Closes on: 31st May 2026
#DEFCON34 #AdversaryVillage
#OffensiveCyberSecurity #AdversarySimulation #PurpleTeam #ThreatActors #Breaches #DEFCON

CALL FOR PAPERS OPEN for Adversary Village at DEF CON 34!
We are looking for Talks, Workshops, Tool Demos, and Hands-on Activities focused strictly on adversary simulation, threat emulation, offensive tradecraft, threat-informed defense, offensive cyber security, state-sponsored threat actors, purple teaming, and real-world attacker techniques. Vendor-neutral, technical, and practical content only.
Submit your research here: https://adversaryvillage.org/call-for-papers/
CFP Closes on: 31st May 2026
#DEFCON34 #AdversaryVillage
#OffensiveCyberSecurity #AdversarySimulation #PurpleTeam #ThreatActors #Breaches #DEFCON

https://winbuzzer.com/2026/04/10/fbi-disrupts-russian-dns-hijack-network-targeting-microsoft-xcxwbn/

FBI Disrupts Russian DNS Hijack Network Targeting Microsoft 365

#Microsoft #Microsoft365 #Russia #Routers #Cybersecurity #CyberThreats #Malware #Cyberespionage #Hackers #MicrosoftSecurity #ThreatActors #Hacking #SecurityThreats #Authentication #Cyberattacks

https://winbuzzer.com/2026/04/10/fbi-disrupts-russian-dns-hijack-network-targeting-microsoft-xcxwbn/

FBI Disrupts Russian DNS Hijack Network Targeting Microsoft 365

#Microsoft #Microsoft365 #Russia #Routers #Cybersecurity #CyberThreats #Malware #Cyberespionage #Hackers #MicrosoftSecurity #ThreatActors #Hacking #SecurityThreats #Authentication #Cyberattacks

https://winbuzzer.com/2026/04/10/fbi-disrupts-russian-dns-hijack-network-targeting-microsoft-xcxwbn/

FBI Disrupts Russian DNS Hijack Network Targeting Microsoft 365

#Microsoft #Microsoft365 #Russia #Routers #Cybersecurity #CyberThreats #Malware #Cyberespionage #Hackers #MicrosoftSecurity #ThreatActors #Hacking #SecurityThreats #Authentication #Cyberattacks

https://winbuzzer.com/2026/04/10/fbi-disrupts-russian-dns-hijack-network-targeting-microsoft-xcxwbn/

FBI Disrupts Russian DNS Hijack Network Targeting Microsoft 365

#Microsoft #Microsoft365 #Russia #Routers #Cybersecurity #CyberThreats #Malware #Cyberespionage #Hackers #MicrosoftSecurity #ThreatActors #Hacking #SecurityThreats #Authentication #Cyberattacks

https://winbuzzer.com/2026/04/10/fbi-disrupts-russian-dns-hijack-network-targeting-microsoft-xcxwbn/

FBI Disrupts Russian DNS Hijack Network Targeting Microsoft 365

#Microsoft #Microsoft365 #Russia #Routers #Cybersecurity #CyberThreats #Malware #Cyberespionage #Hackers #MicrosoftSecurity #ThreatActors #Hacking #SecurityThreats #Authentication #Cyberattacks

China-aligned TA416 resumes spying on EU & Mideast

Proofpoint says China-aligned threat actor TA416 has resumed cyber espionage campaigns against European …
#Europe #EU #AdvancedPersistentThreat(APT) #Cloud #Cyberespionage #cybersecurity #EmailSecurity #EuropeanUnion #EuropeanUnion(EU) #Googledrive #Infosec #MiddleEast #NationalSecurity #NorthernAtlanticTreatyOrganisation(NATO) #Phishing #proofpoint #SoutheastAsia #Taiwan #Threatactors #Threatintelligence
https://www.europesays.com/europe/7962/

https://winbuzzer.com/2026/02/23/nigeria-scam-ring-busted-seven-arrested-meta-tip-off-xcxwbn/

Nigeria Scam Ring Busted: Seven Arrested After Meta Tip-Off

#Cybersecurity #Facebook #Instagram #WhatsApp #SocialMedia #MetaInc #Meta #BigTech #Cybercrime #Scams #Cryptocurrency #OnlineSafety #Fraud #UK #Nigeria #ThreatIntelligence #ThreatActors

Here is a list of the @gayint updated and modernised APT group identifiers:

https://blog.gayint.org/threatActorCrosswalk.html

I'm just a little disappointed there isn't a MOIST FLANGE or NEON CAPYBARA APT as yet 😉

#APT #ThreatActors #GAYINT #Nomenclature

https://winbuzzer.com/2026/02/19/fake-captcha-trick-installs-stealc-on-windows-pcs-xcxwbn/

Fake CAPTCHA Trick Installs StealC on Windows PCs

#Windows #Security #Cybersecurity #StealC #Malware #Cybercrime #Hackers #WindowsSecurity #PowerShell #Scams #DataTheft #ThreatActors #CyberThreats #Cyberattacks #MicrosoftOutlook #Steam #Cryptocurrency

https://winbuzzer.com/2026/02/19/fake-captcha-trick-installs-stealc-on-windows-pcs-xcxwbn/

Fake CAPTCHA Trick Installs StealC on Windows PCs

#Windows #Security #Cybersecurity #StealC #Malware #Cybercrime #Hackers #WindowsSecurity #PowerShell #Scams #DataTheft #ThreatActors #CyberThreats #Cyberattacks #MicrosoftOutlook #Steam #Cryptocurrency

https://winbuzzer.com/2026/02/19/fake-captcha-trick-installs-stealc-on-windows-pcs-xcxwbn/

Fake CAPTCHA Trick Installs StealC on Windows PCs

#Windows #Security #Cybersecurity #StealC #Malware #Cybercrime #Hackers #WindowsSecurity #PowerShell #Scams #DataTheft #ThreatActors #CyberThreats #Cyberattacks #MicrosoftOutlook #Steam #Cryptocurrency

https://winbuzzer.com/2026/02/19/fake-captcha-trick-installs-stealc-on-windows-pcs-xcxwbn/

Fake CAPTCHA Trick Installs StealC on Windows PCs

#Windows #Security #Cybersecurity #StealC #Malware #Cybercrime #Hackers #WindowsSecurity #PowerShell #Scams #DataTheft #ThreatActors #CyberThreats #Cyberattacks #MicrosoftOutlook #Steam #Cryptocurrency

https://winbuzzer.com/2026/02/19/fake-captcha-trick-installs-stealc-on-windows-pcs-xcxwbn/

Fake CAPTCHA Trick Installs StealC on Windows PCs

#Windows #Security #Cybersecurity #StealC #Malware #Cybercrime #Hackers #WindowsSecurity #PowerShell #Scams #DataTheft #ThreatActors #CyberThreats #Cyberattacks #MicrosoftOutlook #Steam #Cryptocurrency

Google released a blog post on steps required to take ASAP, so that we are prepared for when quantum computers are readily available to crack current encryption [1]. I read it after I saw a video talking about this post, which as one might expect, was a bit alarmist. However, it is a real #cybersec #threat, and I've seen other sources mention, that #threatactors are starting to gather #encrypted #data in the expectation to readily #decrypt it in the near future. /1

[1] https://blog.google/innovation-and-ai/technology/safety-security/the-quantum-era-is-coming-are-we-ready-to-secure-it/

https://winbuzzer.com/2026/02/13/nation-state-hackers-weaponizing-gemini-ai-cyberattacks-xcxwbn/

Google: Nation-State Hackers are Weaponizing Gemini AI for Cyberattacks

#AI #GoogleGemini #Google #Cybersecurity #GenAI #GoogleThreatIntelligenceGroup #ThreatActors #ThreatIntelligence #NorthKorea #Russia #China #Iran #Malware #Cybercrime

https://winbuzzer.com/2026/02/13/nation-state-hackers-weaponizing-gemini-ai-cyberattacks-xcxwbn/

Google: Nation-State Hackers are Weaponizing Gemini AI for Cyberattacks

#AI #GoogleGemini #Google #Cybersecurity #GenAI #GoogleThreatIntelligenceGroup #ThreatActors #ThreatIntelligence #NorthKorea #Russia #China #Iran #Malware #Cybercrime

https://winbuzzer.com/2026/02/13/nation-state-hackers-weaponizing-gemini-ai-cyberattacks-xcxwbn/

Google: Nation-State Hackers are Weaponizing Gemini AI for Cyberattacks

#AI #GoogleGemini #Google #Cybersecurity #GenAI #GoogleThreatIntelligenceGroup #ThreatActors #ThreatIntelligence #NorthKorea #Russia #China #Iran #Malware #Cybercrime

https://winbuzzer.com/2026/02/13/nation-state-hackers-weaponizing-gemini-ai-cyberattacks-xcxwbn/

Google: Nation-State Hackers are Weaponizing Gemini AI for Cyberattacks

#AI #GoogleGemini #Google #Cybersecurity #GenAI #GoogleThreatIntelligenceGroup #ThreatActors #ThreatIntelligence #NorthKorea #Russia #China #Iran #Malware #Cybercrime

https://winbuzzer.com/2026/02/13/nation-state-hackers-weaponizing-gemini-ai-cyberattacks-xcxwbn/

Google: Nation-State Hackers are Weaponizing Gemini AI for Cyberattacks

#AI #GoogleGemini #Google #Cybersecurity #GenAI #GoogleThreatIntelligenceGroup #ThreatActors #ThreatIntelligence #NorthKorea #Russia #China #Iran #Malware #Cybercrime

#Ransomware #Cybersecurity #Cybercrime #DataSecurity #ThreatActors #infosec

Russian APT28 Exploit Zero-Day Hours After Microsoft Discloses Office Vulnerability https://thecyberexpress.com/russian-apt28-exploit-zero-day-cve-2026-21509/ #ThreatIntelligence #VulnerabilityNews #Vulnerabilities #MicrosoftOffice #ThreatActors #Backdoor #CERT-UA #Russia #APT28 #Word

Kinda interesting.
https://learn.microsoft.com/en-us/unified-secops/microsoft-threat-actor-naming

#Hacker #HackerGroups #ThreatActors #Naming #Microsoft

https://winbuzzer.com/2026/01/25/sandworm-dynowiper-attack-poland-energy-grid-fails-xcxwbn/

Massive Russian Cyberattack on Poland's Energy Grid Fails

#Russia #Cybersecurity #Malware #Poland #Security #Cyberwarfare #ThreatActors #Military #SecurityThreats #ThreatIntelligence

https://winbuzzer.com/2026/01/25/sandworm-dynowiper-attack-poland-energy-grid-fails-xcxwbn/

Massive Russian Cyberattack on Poland's Energy Grid Fails

#Russia #Cybersecurity #Malware #Poland #Security #Cyberwarfare #ThreatActors #Military #SecurityThreats #ThreatIntelligence

https://winbuzzer.com/2026/01/25/sandworm-dynowiper-attack-poland-energy-grid-fails-xcxwbn/

Massive Russian Cyberattack on Poland's Energy Grid Fails

#Russia #Cybersecurity #Malware #Poland #Security #Cyberwarfare #ThreatActors #Military #SecurityThreats #ThreatIntelligence

https://winbuzzer.com/2026/01/25/sandworm-dynowiper-attack-poland-energy-grid-fails-xcxwbn/

Massive Russian Cyberattack on Poland's Energy Grid Fails

#Russia #Cybersecurity #Malware #Poland #Security #Cyberwarfare #ThreatActors #Military #SecurityThreats #ThreatIntelligence

https://winbuzzer.com/2026/01/25/sandworm-dynowiper-attack-poland-energy-grid-fails-xcxwbn/

Massive Russian Cyberattack on Poland's Energy Grid Fails

#Russia #Cybersecurity #Malware #Poland #Security #Cyberwarfare #ThreatActors #Military #SecurityThreats #ThreatIntelligence

Threat Actors Expand Abuse of Microsoft Visual Studio Code

https://www.jamf.com/blog/threat-actors-expand-abuse-of-visual-studio-code/

#HackerNews #ThreatActors #VisualStudioCode #CyberSecurity #CodeAbuse #TechNews

https://winbuzzer.com/2026/01/22/hackers-breach-fortune-500-companies-exploiting-security-testing-apps-xcxwbn/

Hackers Breach Fortune 500 Companies Exploiting Security Testing Apps

#Cybersecurity #DataBreaches #Malware #Hackers #AWS #GCP #Azure #CloudSecurity #ThreatActors #CyberThreats #RemoteCodeExecution #DataSecurity

🎥 Watch the video recording of the talk: “Blurred Lines of Cyber Threat Attribution: The Evolving Tactics of North Korean Cyber Threat Actors”, from Adversary Village at @defcon 33 Creator Stage.

🎤 Speaker: @spark - Staff Threat Researcher at Zscaler.

https://youtu.be/j5gxdWd5sMg?si=ET2lcQw3XpM52H0-

#AdversaryVillage #DEFCON33 #DEFCON #AccessEverywhere
#AdversaryTactics #AdversaryEmulation #ThreatActors #AdversarySimulation

🎥 Watch the video recording of the talk:
“Here and Now: Exploiting the Human Layer at the Right Moment.” from Adversary Village @defcon 33 Creator Stage.

🎤 Speaker: Daniel Isler - Awareness & Social Engineering Consultant & Team Leader at Dreamlab Technologies.

https://youtu.be/vvDostysRAU?si=E-5LwLwX4ho3qYtq

#AdversaryVillage #DEFCON33 #DEFCON #AccessEverywhere
#AdversaryTactics #AdversaryEmulation #SocialEngineering
#ThreatActors #AdversarySimulation #AdversarialMindset

AI coding tools exploded in 2025. The first security exploits show what could go wrong | Fortune https://fortune.com/2025/12/15/ai-coding-tools-security-exploit-software/ #cybersecurity #AI #AgenticAI #AICoding #threatactors

SoundCloud Confirms Cyberattack, Limited User Data Exposed https://thecyberexpress.com/soundcloud-cyberattack/ #SoundCloudcyberattack #TheCyberExpressNews #TheCyberExpress #DataBreachNews #FirewallDaily #HackingGroup #threatactors #databreach #SoundCloud #CyberNews #DoS

US Offers $10M for Iranian Cyber Operatives Behind Election Interference and Critical Infrastructure Attacks https://thecyberexpress.com/wanted-iranian-cyber-operatives/ #IranianCyberOperatives #CyberEssentials #IranianHackers #FirewallDaily #CyberWarfare #ThreatActors #CyberNews #Espionage #IRGC

Who Is Dark Storm? The Threat Actor European Security Teams Can’t Ignore https://thecyberexpress.com/dark-storm-threat-actor-profile/ #CybleCyberThreatIntelligencePlatform #CyberThreatIntelligencePlatform #governmentagenciesinEurope #proRussianhacktivistgroup #hacktivistalliances #cyberadversaries #TheCyberExpress #FirewallDaily #ThreatActors #DDoSattacks #ThreatActor #CyberNews

Who Is Dark Storm? The Threat Actor European Security Teams Can’t Ignore https://thecyberexpress.com/dark-storm-threat-actor-profile/ #CybleCyberThreatIntelligencePlatform #CyberThreatIntelligencePlatform #governmentagenciesinEurope #proRussianhacktivistgroup #hacktivistalliances #cyberadversaries #TheCyberExpress #FirewallDaily #ThreatActors #DDoSattacks #ThreatActor #CyberNews

Who Is Dark Storm? The Threat Actor European Security Teams Can’t Ignore https://thecyberexpress.com/dark-storm-threat-actor-profile/ #CybleCyberThreatIntelligencePlatform #CyberThreatIntelligencePlatform #governmentagenciesinEurope #proRussianhacktivistgroup #hacktivistalliances #cyberadversaries #TheCyberExpress #FirewallDaily #ThreatActors #DDoSattacks #ThreatActor #CyberNews

Who Is Dark Storm? The Threat Actor European Security Teams Can’t Ignore https://thecyberexpress.com/dark-storm-threat-actor-profile/ #CybleCyberThreatIntelligencePlatform #CyberThreatIntelligencePlatform #governmentagenciesinEurope #proRussianhacktivistgroup #hacktivistalliances #cyberadversaries #TheCyberExpress #FirewallDaily #ThreatActors #DDoSattacks #ThreatActor #CyberNews

Operation Endgame Dismantles 1,025 Servers in a Strike Against Rhadamanthys, VenomRAT Operations https://thecyberexpress.com/operation-endgame-dismantle-rhadamanthys/ #ThreatIntelligenceNews #ThreatIntelligence #OperationEndgame #CyberEssentials #ThreatActors #Rhadamanthys #infostealer #CyberNews #VenomRAT

Large-Scale Spam Campaign Hits npm Registry With 43,000+ Fake Packages https://thecyberexpress.com/indonesianfoods-worm-npm-spam-campaign/ #ThreatIntelligenceNews #IndonesianFoodsworm #TheCyberExpressNews #TheCyberExpress #FirewallDaily #ThreatActors #spamcampaign #CyberNews #Indonesia #Research #malware

Cyble Detects Phishing Campaign Using Telegram Bots to Siphon Corporate Credentials https://thecyberexpress.com/phishing-telegram-bots-steal-credentials/ #CentralEuropeCyberThreats #ThreatIntelligenceNews #PhishingCampaign2025 #SelfContainedMalware #EmailSecurityBypass #ThreatIntelligence #TelegramBotMalware #JavaScriptmalware #MicrosoftPhishing #TelegramAPIAbuse #CredentialTheft #InvoicePhishing #FirewallDaily #AdobePhishing #Cybleresearch #PressRelease #ThreatActors #HTMLPhishing #RFQPhishing