COLDRIVER
TRENDING TOPICS MAY 08, 2025 COLDRIVER Deploys LOSTKEYS Malware in Targeted Espionage Campaign Using ClickFix COLDRIVER, a Russian state-aligned threat group also tracked as Callisto and Star Blizzard, has shifted tactics by deploying a new custom malware called LOSTKEYS. This marks a notable evolution from their typical credential phishing operations
Darcula
TRENDING TOPICS APR 25, 2025 Update: Darcula PhaaS Platform Evolves with GenAI to Streamline Global Phishing Campaigns The Darcula phishing-as-a-service (PhaaS) platform, operated by a threat actor known as LARVA-246, has rolled out major updates integrating generative AI (GenAI) capabilities to automate phishing page creation. Exposed initially in early 2024
Vishing
TRENDING TOPICS APR 01, 2025 Update: Teams Vishing Campaign Shifts Toward Persistence and Stealth A recent intrusion analyzed by Ontinue’s Cyber Defense Centre demonstrates the continued evolution of Teams-based vishing campaigns, first observed in late 2024 and previously linked to Storm-1811. In this case, attackers-initiated contact through Microsoft Teams
State Sponsored
MONTHLY WRAP MONTHLY WRAP Overview The cybersecurity landscape in February 2025 saw a surge in sophisticated cyber threats, with a continued evolution in attack methodologies, increased exploitation of zero-day vulnerabilities, and a notable escalation in botnet and ransomware activities. State-sponsored actors from Ch