Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Arctic Wolf

Malvertising Campaign Delivers Oyster/Broomstick Backdoor via SEO Poisoning and Trojanized Tools

Jul 2, 2025 By Andres Ramos In Arctic Wolf
Since early June 2025, Arctic Wolf has observed a search engine optimization (SEO) poisoning and malvertising campaign promoting malicious websites hosting trojanized versions of legitimate IT tools such as PuTTY and WinSCP.
Read Post
CrowdStrike

CrowdStrike Services Observes SCATTERED SPIDER Escalate Attacks Across Industries

Jul 2, 2025 By Counter Adversary Operations In CrowdStrike
SCATTERED SPIDER, an eCrime adversary, has recently broadened its target scope to include the aviation sector, in addition to its established focus on the insurance and retail industries, as observed by CrowdStrike Services. Throughout Q2 2025, SCATTERED SPIDER's activities have primarily centered on U.S.-based insurance and retail entities, along with U.K.-based retail entities.
Read Post
What Ransomware Teaches Us About Weak Links in the Development Pipeline

What Ransomware Teaches Us About Weak Links in the Development Pipeline

Jul 2, 2025 By SecuritySenses In SecuritySenses
Ransomware attacks aren't just hitting banks and government agencies anymore-they're going straight for the jugular of how modern software is made. That's right: the development pipeline has become prime hunting ground. And while companies scramble to patch after the damage is done, the smarter ones are shifting focus to where it all begins-the code, the pipeline, and the people pushing it live.
Read Post
foresiet

Inside Qilin's New Legal Pressure Tactic: How 'Call a Lawyer' Increases Ransomware Success

Jul 1, 2025 By Foresiet In Foresiet
In the cybercrime ecosystem, innovation often comes in disturbing forms. The ransomware group Qilin—already notorious for offering a full suite of extortion tools to affiliates—has introduced a new feature that elevates psychological warfare to a new level: a “Call a Lawyer” button. This isn’t satire. This is real social engineering, now backed with actual legal threats.
Read Post
cyjax

A Pressing Matter Part I - The Simplification of Ransomware Crime Development Through Cybercriminal Forums

Jul 1, 2025 By Adam Price In CYJAX
Five centuries after the printing press was invented, the digital age began. With significant revolutions in knowledge dissemination, the era taking place now has seen vast amounts of information become instantly accessible. Whilst this is generally seen as a positive in most countries worldwide, malicious intentions persist across the digital world.
Read Post

AI Hackers Are Dumber Than You Think (Here's Proof)

Jun 30, 2025 By Rubrik In Rubrik
Everyone's panicking about AI-powered cyber attacks, but here's what's ACTUALLY happening... Perfect grammar in phishing emails (bye-bye typos!) AI helping write basic malware code NOT some sci-fi hacking revolution The funniest part? Researchers found hackers literally leaving AI tool COMMENTS in their malware code It's like leaving a sticky note that says "ChatGPT helped me write this virus".
View Video

Copyright © 2026 OpsMatters™. All rights reserved.