Threat Actors

Cybersecurity
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian records.
Cybersecurity
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Application Security
Trojanized Terraform Provider Hides FLATROOF and ROOFDECK Backdoors
Zscaler and SentinelLabs say a fake AWS Terraform provider delivers FLATROOF and ROOFDECK backdoors, with low-confidence links to TraderTraitor.
Cybersecurity
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers despite MFA.
Cybersecurity
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting any files.
Cybersecurity
US Offers $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
The State Department's Rewards for Justice program offers up to $10 million for information on Zhang Yu, a Chinese national indicted over the HAFNIUM hacks.
Cybersecurity
FBI Drops Accenture Contractor After ShinyHunters PeopleSoft Breach
The FBI removed an Accenture contractor over an unapplied patch that let ShinyHunters breach FBIJobs.gov, as a suspected group leader was arrested in Jordan.
Cybersecurity
Ex-Engineer Gets 32 Months for Locking 3,000 Employer Devices
Daniel Rhyne, a former core infrastructure engineer, was sentenced to 32 months for locking over 3,000 devices at a New Jersey firm and demanding 20 ...
Cybersecurity
Alleged ShinyHunters Leader ‘Rey’ Reportedly Held in Jordan
A suspected ShinyHunters member known online as Rey was reportedly detained in Jordan on September 29 and is said to be cooperating with FBI investigators.
Cybersecurity
FBI Tells ShinyHunters Members to Turn Themselves In
The FBI publicly urged remaining ShinyHunters members to surrender after Dutch police arrested an alleged leader in Amsterdam and found plans for murders.