The Russian state-backed Star Blizzard hacker group has ramped up operations with new, constantly evolving malware families ...

The Coldriver hacking group reportedly shifted its operation quickly after the May 2025 public disclosure of its LostKeys ...

Google reveals COLDRIVER’s new malware families NOROBOT, YESROBOT, and MAYBEROBOT amid rising cyber espionage.

Google threat researchers in May publicized the Russian-based threat group Coldriver's LostKeys credential-stealing malware. However, five days later, the bad actors launched three new malware ...

Star Blizzard has been using a new backdoor in attacks after its LostKeys malware was detailed in a public report in June.

Researchers caution that the group’s rapid pivots and targeted filtering complicate detection and require behavior-based ...

Russia-linked threat group COLDRIVER rapidly replaced its exposed malware with a stealthier PowerShell variant, using fake CAPTCHA prompts and cryptographic ...

Iran-linked MuddyWater used a compromised email to spread Phoenix malware targeting 100+ MENA government entities ...

Group-IB has uncovered a phishing campaign by Iran-linked MuddyWater, exploiting compromised emails for foreign intelligence ...

Everest group takes credit for Collins Aerospace hack, Maryland launches VDP, gamers targeted with red teaming tool and RAT.

Turn SBOMs into supply chain defense with Heisenberg, an open source tool developed by Max Feldman and Yevhen Grinman. It ...

An AI version of session hijacking can lead to attackers injecting malicious prompts into legitimate MCP communications.