Can Healthcare Group2026-06-15
qilinransomwareTurkeyT1566
Can Healthcare Group ha sido afectada por un ataque de ransomware atribuido al grupo cybercriminal qilin. La alerta, publicada el 2026-06-15, indica que una organización de salud importante ...
NXIT and Franco Vago S.p.a. and Traconf Srl2026-06-15
deadlockransomwareUnited States
NXIT y sus socios Franco Vago S.p.a. y Traconf Srl, empresas italianas especializadas en logística y transporte internacional, han sido afectadas por un ataque de ransomware atribuido al gru...
StealthMole: Security OSINT Highlights — First Week of June 2026 Reporting collected during the first week of June 2026 is dominated by vulnerability disclosures and exploitation-related alerts, with a secondary concentration in malware, espionage, and intrusion activity supported by file-hash and IP indicators.2026-06-10
stealthmole_intmalwareUnited States
StealthMole cyber threat intelligence on ransomware, data leaks and criminal underground ecosystems.
Group-IB Threat Intelligence: SilabRAT places significant emphasis on #cryptocurrency theft. Beyond harvesting credentials and browser data, it can identify wallet-related artifacts and automatically attempt password recovery using credentials collected from infected systems. These additions reflect the growing focus on direct monetization within modern #malware ecosystems.2026-06-10
x-ctimalwareUnited States
Group-IB Threat Intelligence feed featuring APT research, ransomware analysis and cybercrime investigations.
Group-IB Threat Intelligence: One of SilabRAT's most notable capabilities is its use of Hidden Virtual Network Computing (HVNC). By interacting with services directly from the victim's device, attackers can perform account activity, access sensitive platforms, and conduct fraudulent operations while appearing as a legitimate user originating from the trusted device and IP address. #InfoSec2026-06-10
x-cticampaignUnknown
Group-IB Threat Intelligence feed featuring APT research, ransomware analysis and cybercrime investigations.
Group-IB Threat Intelligence: As browser security evolves, attackers are moving beyond traditional cookie theft. #SilabRAT advertises browser profile cloning, allowing operators to replicate a victim's browser environment, including extensions, storage, and fingerprinting artifacts. This enables access to authenticated sessions that may otherwise resist conventional session hijacking techniques. #CyberThreats #ThreatIntelligence2026-06-10
x-cticampaignUnknown
Group-IB Threat Intelligence feed featuring APT research, ransomware analysis and cybercrime investigations.
columbiaorthogroup.com2026-06-09
lockbit5ransomwareUnited StatesT1566
columbiaorthogroup.com fue afectada por un ataque de ransomware atribuido al grupo Lockbit5. La empresa, una institución médica en Missouri, sufrió un incidente cibernético el día 2026-06-09...
scbgroup.com.sg2026-06-09
lockbit5ransomwareSingapore
El 9 de junio de 2026, la empresa SCB Group (antigua Jian Huang Group) fue objetivo de un ataque cibernético atribuido al grupo ransomware Lockbit5. Esta organización, basada en Singapur y d...