explorer.exe

• UAT-8302 and its box full of malware

  UAT-8302 and its box full of malware Cisco Talos is disclosing UAT-8302, a sophisticated, China-nexus advanced persistent threat (APT) group targeting government entities in South America since at least late 2024 and government agencies in southeastern Europe in 2025. Cisco Tal

• Sednit reloaded: Back in the trenches

  Sednit reloaded: Back in the trenches The resurgence of one of Russia’s most notorious APT groups Sednit reloaded: Back in the trenches Award-winning news, views, and insight from the ESET security community English Español Deutsch Português Français TIPS & ADVICE BUSINESS

• VECT: Ransomware by design, Wiper by accident

  VECT: Ransomware by design, Wiper by accident Key Takeaways Background VECT Ransomware is a Ransomware-as-a-Service (RaaS) program that made its first appearance in December 2025 on a Russian-language cybercrime forum. After claiming their first two victims in January 2026, the

• Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools

  Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools Unit 42 analyzes AD CS exploitation through template misconfigurations and shadow credential misuse while offering behavioral detection for defenders. The post Inside AD CS Escalation: Unpacking Advanced Mis

• Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

  Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate finance teams to deliver a remote access trojan designed to steal sensi

• Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict

  Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict Key Findings Introduction During the recent geopolitical tensions in the Middle East, we reported on multiple Iran-nexus threat actors advancing Iran’s strategic objectives through cyber operati

All reports →

• Connector · intel_report_ingest9