logo

Russian-speaking hacker group disrupted by local researchers

ID: 8a8d779c-f7ba-5fd0-9409-e15209727af1

STIX ID: report--8a8d779c-f7ba-5fd0-9409-e15209727af1

Feed Name: The Record from Recorded Future News

Threat Score
65/100

Date Published: 2025-07-22

Date Updated: 2026-05-01

...
...

Russian researchers and the national domain authority dismantled more than 110 domains tied to NyashTeam, a malware-as-a-service operator active since at least 2022 that sold DCRat and WebRat, provided C2 hosting, plugins, and tutorials, and used Telegram, YouTube and GitHub to distribute malware disguised as game cheats or pirated software; the takedown has significantly but temporarily disrupted the group's operations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.