#victim

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

Jul 28, 2026 // 15:01

The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been attributed to a fresh […]

Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

Jul 27, 2026 // 23:48

Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a March law-enforcement […]

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

Jul 25, 2026 // 18:31

The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and […]

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

Jul 25, 2026 // 13:38

The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and […]

New Spirals ransomware encrypts victim network in under 24 hours

Jul 16, 2026 // 13:57

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in less than 24 hours. The attack […]

Klue OAuth breach victim list grows as Icarus hackers claim attack

Jun 20, 2026 // 01:36

Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to customers’ Salesforce […]