Threat actor

EncryptHub

In 3 briefs, most recently 16 August 2025. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. The WarLock ransomware attack on Colt Technology, UAT-7237 APT breaches of Taiwanese web servers, and Cisco's patched critical FMC RADIUS flaw.
  2. BlackSuit ransomware sites seized, Toptal GitHub breach poisons npm packages, and ToolShell SharePoint flaws hit 400+ servers.
  3. SharePoint zero-days (CVE-2025-53770/53771) breached 75+ servers, 3,500 sites ran stealth crypto miners, and npm packages were trojanized via phishing.