logo

What’s Trending: Top Cyber Attacker Techniques, December 2024–February 2025

ID: 2df09282-7ceb-5d59-bd0c-aae4cf6079fc

STIX ID: report--2df09282-7ceb-5d59-bd0c-aae4cf6079fc

Feed Name: ReliaQuest Blog

Threat Score
78/100

Date Published: 2025-04-09

Date Updated: 2026-04-29

...
...

ReliaQuest's Dec 2024–Feb 2025 report documents a rise in financially motivated activity: large-scale VPN brute-force attempts, MSHTA and ClickFix-enabled ClearFake malware (delivering Lumma), Microsoft Teams phishing campaigns by Storm-1811/Black Basta (including Sneaky 2FA AiTM kits), and CL0P’s mass exploitation of Cleo (CVE-2024-50623) driving ransomware leak-site listings; the report provides IOCs, case studies, and prioritized defensive recommendations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.