Monthly Wrap
MONTHLY WRAP MONTHLY WRAP Overview April 2025 marked a decisive evolution in the global cyber threat landscape, characterized by an unprecedented blend of technical sophistication, strategic targeting, and cross-sector disruption. State-sponsored actors intensified espionage efforts across Southeast Asia, Europe, and L
LabHost
TRENDING TOPICS MAY 01, 2025 FBI Disrupts Global Phishing Network After Uncovering Massive LabHost Infrastructure The FBI recently revealed the scale of a now-dismantled phishing-as-a-service operation known as LabHost, which enabled cybercriminals to launch coordinated phishing campaigns against millions of victims worldwide. From late 2021 through
Microsoft
TRENDING TOPICS APR 30, 2025 Microsoft Telnet Server Vulnerability Allows Guest Login Bypass A critical security vulnerability has been discovered in Microsoft’s legacy Telnet Server that allows threat actors to bypass guest login restrictions, even in systems where guest access has been explicitly disabled. This flaw, identified by researchers
ResolverRAT
TRENDING TOPICS APR 29, 2025 Update: ResolverRAT; Advanced Memory-Resident Malware Targets Healthcare and Pharma ResolverRAT is a newly identified remote access trojan that has emerged as a distinct and sophisticated threat, first spotted in March 2025. It’s specifically targeting healthcare and pharmaceutical organizations, using regionally tailored phishing campaigns
DragonForce
TRENDING TOPICS APR 28, 2025 Update: DragonForce Introduces Cartel Model to Expand Ransomware Operations DragonForce is shifting the ransomware landscape by building a cartel-style structure that lets other ransomware groups operate under their umbrella without managing their infrastructure. Through a new distributed affiliate branding model, DragonForce offers affiliates access
Darcula
TRENDING TOPICS APR 25, 2025 Update: Darcula PhaaS Platform Evolves with GenAI to Streamline Global Phishing Campaigns The Darcula phishing-as-a-service (PhaaS) platform, operated by a threat actor known as LARVA-246, has rolled out major updates integrating generative AI (GenAI) capabilities to automate phishing page creation. Exposed
Zero-Day
TRENDING TOPICS APR 24, 2025 M-Trends 2025 Reveals Advanced Threat Actor Tactics and Expanding Attack Surfaces Google’s Mandiant unit has released its M-Trends 2025 report, revealing that threat actors, particularly those tied to China, are increasingly deploying tailored malware ecosystems and leveraging zero-day vulnerabilities to maintain
Docker
TRENDING TOPICS APR 23, 2025 Docker Malware Campaign Abuses Decentralized Networks Through Deep Payload Obfuscation A recently identified malware campaign targets Docker environments by disguising malicious containers as benign images hosted on Docker Hub. The infection starts when a user runs a container from the “kazutod/tene:ten” image, which
RustoBot
TRENDING TOPICS APR 22, 2025 RustoBot Targets Routers for DDoS in Growing Global Campaign RustoBot is a recently discovered malware strain actively exploiting known vulnerabilities in TOTOLINK and DrayTek routers to build a botnet capable of launching high-impact Distributed Denial of Service (DDoS) attacks. Observed between January and February
Cyber Insights
U.S. tech companies should prepare for increasingly sophisticated attacks from Dark Storm and allied hacktivist groups that may use service disruptions as diversions for more damaging operations like data theft or infrastructure sabotage. CYBER INSIGHTS CYBER INSIGHTS APR 21, 2025 APR 21, 2025 Overview
DKIM
TRENDING TOPICS APR 21, 2025 Sophisticated DKIM Replay Attack Exploits Google Infrastructure to Deliver Phishing Cybersecurity researchers at EasyDMARC recently uncovered an advanced phishing technique that exploits Google’s email infrastructure through a method known as a DKIM replay attack, allowing malicious emails to appear fully authenticated and sent from
ResolverRAT is a sophisticated memory-resident trojan targeting healthcare and pharmaceutical sectors through localized phishing emails. It evades detection by abusing Microsoft's .NET ResourceResolve system while using encryption and fileless techniques to steal sensitive data. CYBER INSIGHTS CYBER INSIGHTS AP