CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
Vodka maker Stoli files for bankruptcy in US after ransomware attack
Description: Stoli Group's U.S. companies have filed for bankruptcy following an August ransomware attack and Russian authorities seizing the company's remaining distilleries in the country. [...]
Source: BleepingComputer
December 3rd, 2024 (6 months ago)
North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks
Description: The North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately conduct credential theft. "Phishing emails were sent mainly through email services in Japan and Korea until early September," South Korean cybersecurity company Genians said. "Then, from mid-September,
Source: TheHackerNews
December 3rd, 2024 (6 months ago)
Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads
Description: A newly discovered malware campaign has been found to target private users, retailers, and service businesses mainly located in Russia to deliver NetSupport RAT and BurnsRAT. The campaign, dubbed Horns&Hooves by Kaspersky, has hit more than 1,000 victims since it began around March 2023. The end goal of these attacks is to leverage the access afforded by these trojans to install stealer
Source: TheHackerNews
December 3rd, 2024 (6 months ago)
Russia sentences Hydra dark web market leader to life in prison
Description: Russian authorities have sentenced the leader of the criminal group behind the now-closed dark web platform Hydra Market to life in prison. [...]
Source: BleepingComputer
December 2nd, 2024 (6 months ago)
Wanted Russian Hacker Linked to Hive and LockBit Ransomware Arrested
Description: A Russian cybercriminal wanted in the U.S. in connection with LockBit and Hive ransomware operations has been arrested by law enforcement authorities in the country. According to a news report from Russian media outlet RIA Novosti, Mikhail Pavlovich Matveev has been accused of developing a malicious program designed to encrypt files and seek ransom in return for a decryption key. "At present,
Source: TheHackerNews
December 1st, 2024 (7 months ago)
Russia arrests cybercriminal Wazawaka for ties with ransomware gangs
Description: Russian law enforcement has arrested and indicted notorious ransomware affiliate Mikhail Pavlovich Matveev (also known as Wazawaka, Uhodiransomwar, m1x, and Boriselcin) for developing malware and his involvement in several hacking groups. [...]
Source: BleepingComputer
November 29th, 2024 (7 months ago)
'Operation Undercut' Adds to Russia Malign Influence Campaigns
Description: Just like Russia's Doppelgänger effort, the goal is to spread misinformation about Ukraine and Western efforts to help Ukraine in its war with Russia.
Source: Dark Reading
November 27th, 2024 (7 months ago)
'RomCom' APT Mounts Zero-Day, Zero-Click Browser Escapes in Firefox, Tor
Description: The innocuously named Russian-sponsored cyber threat actor has combined critical and serious vulnerabilities in Windows and Firefox products in a zero-click code execution exploit.
Source: Dark Reading
November 27th, 2024 (7 months ago)
Russian Script Kiddie Assembles Massive DDoS Botnet
Description: Over the past year, "Matrix" has used publicly available malware tools and exploit scripts to target weakly secured IoT devices — and enterprise servers.
Source: Dark Reading
November 27th, 2024 (7 months ago)
Firefox and Windows zero-days exploited by Russian RomCom hackers
Description: ​Russian-based RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America. [...]
Source: BleepingComputer
November 27th, 2024 (7 months ago)