Browse public community intelligence reports, source analysis, and threat research.
14 intel reports
OilRig (APT34) is using the Project CAV3RN framework to conduct cyberespionage against Israeli targets, leveraging Outlook calendar events for C2 and DNS AAAA records for configuration recovery.
The SuccessKey threat actor is targeting Vite ecosystem developers using malicious scoped npm packages that deliver a Remote Access Trojan (RAT) via a multi-tier blockchain C2 infrastructure.
The TuxBot v3 Evolution framework is a modular IoT botnet targeting multiple architectures using LLM-assisted code generation and diverse C2 fallback mechanisms.
A Chinese-speaking threat actor uses VoidLink, a modular AI-assisted framework, to deploy hybrid LKM/eBPF rootkits for kernel-level stealth and ICMP-based C2 on Linux systems.
