SectionResearch
New techniques, papers and threat intelligence.
China and India Linked Hackers Both Breached Pakistan’s Balochistan Police
SentinelLabs uncovered more than two years of overlapping espionage inside Pakistani law enforcement networks, with China linked and India linked groups independently…
Third Ex-Security Pro Sentenced for Feeding Data to BlackCat Ransomware Gang
Florida-based negotiator Angelo Martino received 70 months in prison for secretly helping BlackCat/Alphv extort at least five victims, marking the third such…
GigaWiper: Go-Based Backdoor Merges Wiper, Ransomware, and Remote Access
Microsoft details GigaWiper, a Go-based backdoor active since October 2025 that bundles destructive disk-wiping, file encryption, and full remote control into a…
Helix Vishing Group Targets SharePoint via Device Code Phishing
A newly identified extortion group called Helix is combining voice phishing, device code abuse, and MFA hijacking to steal and ransom data…
GigaWiper Backdoor Combines Disk Wiping, Fake Ransomware, and Spyware
Microsoft has analyzed a modular Windows backdoor called GigaWiper that fuses three distinct destructive capabilities into a single operator-controlled toolkit.
Dormant GitHub Accounts Used to Map Corporate Orgs via API Scraping
Datadog Security Labs has identified multiple overlapping campaigns systematically enumerating GitHub organizations, repositories, and user accounts, with attackers hiding behind aged ghost…
Fake Paysafe and Skrill SDKs on npm and PyPI harvest developer credentials
Seventeen malicious packages mimicking legitimate payment SDK APIs silently exfiltrate API keys, cloud tokens, and system metadata to an attacker-controlled AWS server.
Eight Greeks Sue Intellexa for $8.7M Over Predator Spyware Surveillance
Eight Greek nationals targeted by Predator spyware have filed a civil lawsuit against Intellexa and 13 associated individuals, seeking roughly 7.6 million…
Block to Pay $45M Settlement Over Cash App Security Failures
Forty-six state attorneys general have reached a bipartisan settlement with Block, Inc. over allegations that Cash App misled users about fraud protections…
Supreme Court Lets Texas App Age Verification Law Take Effect
The Supreme Court declined to block the Texas App Store Accountability Act, allowing enforcement to proceed while a federal appeals court considers…
RedWing MaaS Brings Android Bank Fraud to Telegram as a Rental Service
A newly discovered Android malware operation called RedWing is being offered on Telegram as a turnkey bank-fraud service, lowering the bar for…
Ohio County Paid $1M Ransom to Kairos Extortion Group After Data Theft
Union County, Ohio reportedly paid $1 million in Bitcoin to prevent the release of 2 terabytes of stolen data, following a May…