3 casos · pág. 1/1
SOCRadar researchers analyzed an exposed directory at 45.227.254.43 that revealed an AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. It is centered on an "Autonomous Red Team Kill Chain Framework" called Phantom. The actor is assessed to be Russian-speaking and acts both as an intrusion and …
Group-IB and NyxLab disclosed a large-scale campaign by the cybercriminal actor k0t (aliases CryptoFeel, Member19, QazWsxShop, first seen October 22, 2025) against exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect. The actor is assessed to be an initial access broker or affiliate tied to the Q…
Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …
