Category Archives: Threat Alerts
Fake CAPTCHA Scam Exploits Global IRSF for SMS Fraud
A sophisticated international revenue share fraud campaign uses a fake CAPTCHA scam to trick mobile users into sending background international SMS messages. Continue reading
ShinyHunters ADT Breach: Digital Extortion Deadline Reached
The ShinyHunters ADT breach reaches a critical point as the cyber-extortion group sets a final deadline for the release of 10 million sensitive records. Continue reading
BlackFile Vishing: Syndicate Launches Seven-Figure Data Extortion Wave
A sophisticated BlackFile vishing campaign is currently targeting the retail and hospitality sectors, utilizing helpdesk impersonation and MFA bypass to facilitate massive data extortion. Continue reading
Cybersecurity Threat Landscape: Emerging Social Engineering Alerts
Recent investigations into the cybersecurity threat landscape have identified new sophisticated social engineering tactics targeting high-security communication platforms. Continue reading
ShinyHunters Udemy Breach: 1.4 Million User Records Held for Ransom
The ShinyHunters Udemy breach involves a high-stakes digital extortion campaign where attackers threaten to release 1.4 million user records by April 27, 2026. Continue reading
APT-C-13 Phishing Campaign: Multi-Stage LNK and Tor Tunneling Tactics
Security researchers have identified a complex APT-C-13 Phishing Campaign that utilizes recursive LNK decompression and Tor Hidden Services to create stealthy network backdoors. Continue reading
Microsoft Defender Zero-Days: Active Exploitation of RedSun and UnDefend Flaws
Security researchers and CSIRT-ITA warn of the active exploitation of two unpatched Microsoft Defender zero-days, codenamed RedSun and UnDefend, which allow attackers to bypass security updates and gain SYSTEM-level access. Continue reading
Trigona Exfiltration Tool: New Proprietary Malware Evades Security Defenses
Ransomware affiliates have transitioned to a custom Trigona exfiltration tool to bypass security systems and accelerate data theft through parallel streaming and connection rotation. Continue reading