Browse public community intelligence reports, source analysis, and threat research.
13 intel reports
APT36 uses the Ghazwa spyware variant to conduct comprehensive surveillance on Android devices through media projection, audio recording, and extensive data exfiltration.
The threat actor Mr_Rot13 is exploiting a critical cPanel authentication bypass (CVE-2026-41940) to deploy Go-based infectors and the 'filemanager' remote access trojan.
An unknown threat actor is exploiting a critical cPanel authentication bypass (CVE-2026-41940) to target South-East Asian military and government entities for data exfiltration and persistent network access.
