Threat Overview A recent threat report published by AlienVault on October 28, 2025, sheds light on sophisticated cyber campaigns orchestrated by the BlueNoroff threat group. Known for their financially motivated attacks, BlueNoroff has expanded its tactics
Continue ReadingBlog
Earth Estries APT Group Exploits WinRAR Vulnerabilities
Threat Overview The Earth Estries Advanced Persistent Threat (APT) group has recently been identified as actively leveraging vulnerabilities in WinRAR to launch shellcode attacks on Windows operating systems. This report provides a comprehensive look at the
Continue ReadingQilin Ransomware Group Exposes Attack Techniques Through Multiple Cases
Threat Overview The ransomware group Qilin has been notably active in 2025, with over 40 victim cases published per month on its leak site. This report delves into the methods and tactics employed by this group,
Continue ReadingState Linked F5 BIG IP Source Code Exploits With BRICKSTORM Backdoor
Threat Overview A recently published threat report by AlienVault on October 24, 2025, highlights a significant cyber threat involving the exploitation of the F5 BIG-IP source code leak. This leak is associated with state-linked campaigns utilizing
Continue ReadingNew Phishing Kit Targets Microsoft Accounts Across Industries
Threat Overview A new threat report published by AlienVault on October 21, 2025, has revealed a concerning development in cyber threats. The report, titled 'Tykit Analysis: New Phishing Kit Stealing Hundreds of Microsoft Accounts in Finance,'
Continue ReadingAlarming SEO Poisoning Campaign Targets Ivanti VPN Clients
Threat Overview A recent threat report published by CyberHunter_NL on October 21, 2025, highlights a concerning cyber threat involving malicious Ivanti VPN client sites. The report, titled 'Beware of Malicious Ivanti VPN Client Sites in Google
Continue ReadingLunar Spider Group Uses Fake Captcha to Broaden Reach
Threat Overview A comprehensive threat report published by AlienVault on October 20, 2025, reveals a significant expansion in the tactics of Lunar Spider, a notorious Russian cybercriminal group. This report, titled 'Lunar Spider Expands their Web
Continue ReadingUnderstanding Ransomware Impact on Victims
Threat Overview A recent threat report published by AlienVault on October 16, 2025, delves into the profound impact of ransomware attacks, particularly on small businesses. The report, titled Ransomware Attacks and How Victims Respond, underscores the
Continue ReadingColombian Users Targeted by Judicial Phishing Campaign with Info-Stealer Malware
Threat Overview A new threat report published by AlienVault on October 13, 2025, reveals a sophisticated phishing campaign targeting Colombian users. This campaign employs a judicial notification lure to trick victims into opening an .SVG file
Continue ReadingNew Cloud Threat Group Targeting AWS Environments
Threat Overview A new threat group named Crimson Collective has been observed operating in the cloud, specifically targeting AWS environments. This group is known for data exfiltration and subsequent extortion of victims. The Crimson Collective recently
Continue Reading