Scattered Spider (also known by aliases such as 0ktapus, Muddled Libra, Roasted 0ktapus, Scatter Swine, UNC3944, Octo Tempest, Storm-0971, DEV-0971, and Starfraud1) is recognized as a highly active...

A Major Power Shift: The Sudden Disappearance of RansomHub One of the most pivotal developments in the ransomware landscape occurred in late March 2025, when RansomHub—widely regarded as the most ...

On the evening of July 18, 2025, active and large-scale exploitation of a newly discovered SharePoint remote code execution (RCE) vulnerability chain—dubbed “ToolShell“—was observed in the wild. In...

Windows Shortcut files — commonly known as LNK files — are a core part of the Windows ecosystem. They allow users to create convenient links to files, folders, or applications without duplicating t...

In today’s rapidly evolving cyber threat landscape, information stealers — or “infostealers” — have become a pervasive and escalating threat. These stealthy malware variants are specifically engine...

While hunting for phishing domains, I came across this suspicious domain: hxxps://ypp-studio[.]com. It appears to be a phishing domain. Let’s conduct a thorough technical analysis to uncover more ...

DragonForce Ransomware emerged in 2023 as a formidable threat within the cybercriminal landscape, operating under a Ransomware-as-a-Service (RaaS) model. Initially, the group—also named DragonForce...

North Korean threat actor designations often exhibit significant overlap, making attribution complex. As a result, some security researchers collectively refer to all North Korean state-sponsored c...

Iranian Crypto Exchange Nobitex Breached in $81M Heist Attributed to Israel-Linked Threat Actors As the DarkAtlas Research Squad, we conducted a thorough investigation to uncover the root cause ...

The attackers employed a sophisticated combination of the ClickFix phishing technique, multi-stage loaders, and time-based evasion tactics to covertly deploy AsyncRAT alongside a customized variant...