logo

Brandefense Blog

ID: fab4a295-5944-5656-b2db-38a389883cd8

STIX ID: identity--fab4a295-5944-5656-b2db-38a389883cd8

Feed Type: rss

Earliest post: 2024-12-24

Latest post: 2026-04-20

Actionable cybersecurity insights, threat research, attack surface analysis, dark web intelligence, and digital risk protection guidance from the Brandefense team.

01/01/2020
06/04/2026
Title Date Published Describes IncidentAuthorVisible
GC01 (Golden Chickens): Inside the Arsenal of a Premier E-Crime MaaS Provider2026-04-16TrueBRANDEFENSETrue
BlackTech2026-04-14TrueBRANDEFENSETrue
UAC-0194: Inside a Rapidly Evolving NTLM-Exploiting Espionage Operation2026-04-13TrueBRANDEFENSETrue
What Is Credential Stuffing? Attackers Don’t Crack Passwords, They Buy Them2026-04-04TrueBRANDEFENSETrue
What Is Triple Extortion? The Anatomy of the Encryption + Leakage + DDoS Trio2026-04-03TrueBRANDEFENSETrue
MFA Doesn’t Protect You — Cookies Give You Away: The Rise of Session Hijacking2026-03-26TrueBRANDEFENSETrue
Fake Mobile App: How Is Your Clone on the App Store Stealing Your Users?2026-03-25TrueBRANDEFENSETrue
UAC-0102: Inside a Covert Espionage Operation Targeting Ukraine and Beyond2026-03-23TrueBRANDEFENSETrue
Inside the Operations of Crazy Evil: The Rise of a Global Crypto-Focused Cybercrime Network2026-03-22TrueBRANDEFENSETrue
1 Million User Records Exposed: A Deep Dive into the Komiko AI App Data Breach2026-03-21TrueBRANDEFENSETrue
Konni (Vedalia / TA406 / Opal Sleet): North Korea’s Steady Hand in Espionage Operations2026-03-19TrueBRANDEFENSETrue
Warlock Group: The Rise of GOLD SALEM (Storm-2603) in 2025’s Ransomware Landscape2026-03-18TrueBRANDEFENSETrue
DarkHotel (APT-C-06 / ATK52 / DUBNIUM): The Global Espionage Network Behind Elite Cyber Intrusions2026-03-16TrueBRANDEFENSETrue
Kasablanka: The Emerging North African Cyber Threat Actor2026-03-12TrueBRANDEFENSETrue
Turla APT: Russia’s Longstanding Cyber Espionage Powerhouse2026-03-10TrueBRANDEFENSETrue
APT19 (DEEP PANDA): A Persistent China-Aligned Espionage and Credential Theft Actor2026-03-09TrueBRANDEFENSETrue
HAFNIUM APT Group (Silk Typhoon): Exploiting the Global Attack Surface for Strategic Espionage2026-03-06TrueBRANDEFENSETrue
Tick APT Group (BRONZE BUTLER): A Long-Running East Asian Cyber Espionage Actor2026-03-05TrueBRANDEFENSETrue
MCP Server Security: 10 Protocol-Level Attack Scenarios Behind the “Install and Run” Speed2026-03-02TrueBRANDEFENSETrue
FishMonger APT Group: A Persistent China-Aligned Cyber Espionage Actor2026-02-28TrueBRANDEFENSETrue
Dark Caracal APT Group (G0070): Mobile-Centric Espionage and Regional Surveillance2026-02-27TrueBRANDEFENSETrue
LIMINAL PANDA: China’s Emerging Espionage Threat in the Semiconductor and Technology Sectors2026-02-26TrueBRANDEFENSETrue
Reynolds Ransomware: BYOVD Evasion & NSecKrnl Abuse2026-02-25TrueBRANDEFENSETrue
Winter Vivern (TAG-70 / UAC-0114 / TA473): A Persistent Eastern European Cyber-Espionage Threat Targeting NATO and EU Governments2026-02-20TrueBRANDEFENSETrue
APT-C-36: Latin America’s Persistent Cyber-Espionage Force2026-02-19TrueBRANDEFENSETrue
Inside the Operations of Inception Framework: A Decade of Stealth, Espionage, and Global Targeting2026-02-10TrueBRANDEFENSETrue
APT272026-01-31TrueBRANDEFENSETrue
APT3 (BORON): A Pioneering China-Aligned Cyber Espionage Group2026-01-30TrueBRANDEFENSETrue
FIN11 (DEV-0950 / Lace Tempest / TA505 / TEMP.Warlock / UNC902): A 1000-Word Intelligence2026-01-29TrueBRANDEFENSETrue
From Shadow IT to Shadow AI: Clawdbot (Moltbot) and the Rise of Unmanaged Agent Gateways2026-01-28TrueBRANDEFENSETrue
APT35: Iran’s Persistent Cyber Espionage Force2026-01-22TrueBRANDEFENSETrue
APT15: A Comprehensive Intelligence BlogAPT15 (Ke3Chang / Nylon Typhoon) | China-Aligned Cyber Espionage APT2026-01-21TrueBRANDEFENSETrue
TA577 (Hive0118): The Evolving Phishing Specialist Behind Modern Malware Campaigns2026-01-20TrueBRANDEFENSETrue
VanHelsing: Inside the Rise of a Multi‑Platform RaaS Threat Actor2026-01-15TrueBRANDEFENSETrue
WIZARD SPIDER: The Financial Empire Behind Global Ransomware Operations2026-01-14TrueBRANDEFENSETrue
APT402026-01-13TrueBRANDEFENSETrue
RomCom APT2026-01-08TrueBRANDEFENSETrue
Inside the Operations of Cactus: The Rise of a Stealth-Focused Ransomware Threat2026-01-07TrueBRANDEFENSETrue
Operation ForumTroll: Inside a Coordinated Espionage and Influence Campaign Targeting Eastern Europe2026-01-06TrueBRANDEFENSETrue
PlushDaemon APT: An In-Depth Analysis of a Stealthy China-Aligned Cyber Espionage Group2026-01-05TrueBRANDEFENSETrue
Smishing Triad: A Global Cybercrime Syndicate Targeting Postal and Financial Networks2026-01-04TrueBRANDEFENSETrue
Silent Chollima: North Korea’s Dual-Track Cyber Weapon2025-12-30TrueBRANDEFENSETrue
OldGremlin: A Stealthy Russian-Speaking Ransomware and Espionage Threat Group Evolving Into a Precision Striking APT2025-12-29TrueBRANDEFENSETrue
OilRig: Iran’s Persistent Espionage Arm in Cyberspace2025-12-24TrueBRANDEFENSETrue
Callisto APT: Russia’s Persistent Espionage Operator2025-12-23TrueBRANDEFENSETrue
Crafty Camel APT: Iran’s Expanding Espionage Footprint in the Modern Cyber Battlespace2025-12-18TrueBRANDEFENSETrue
Angry Likho: Inside a Rapidly Growing Espionage Threat Targeting Eastern Europe2025-12-17TrueBRANDEFENSETrue

1–47 of 47