OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia
https://securelist.com/octlurk-silklurk-backdoors-central-asia/120840/
https://securelist.com/octlurk-silklurk-backdoors-central-asia/120840/
Operation Talked: A Russia-Linked Cyber Espionage Campaign Targeting Ukraine’s Defense Industry
https://socradar.io/blog/operation-talked-russia-ukraine-defense-industry/
https://socradar.io/blog/operation-talked-russia-ukraine-defense-industry/
SOCRadar
Operation Talked: Russia-Linked Espionage on Ukraine Defense,
TL;DR: OPERATION TALKED is an ongoing Russia-linked espionage campaign, exposed after the actor left their own C2 as an open
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: qilin
📅 Fecha: 2026-07-30T08:59:17.982245+00:00
🏢 Empresa: Excel Consultores
🔗 Sitio: www.excel.com.mx
🛠 Sector: Professional Services
🔍 Descripcion:N/A
https://images.ransomware.live/victims/59f6ecec97066cb4b86ca0b7bf8ec11a.png
https://www.ransomware.live/id/RXhjZWwgQ29uc3VsdG9yZXNAcWlsaW4=
👤 Grupo: qilin
📅 Fecha: 2026-07-30T08:59:17.982245+00:00
🏢 Empresa: Excel Consultores
🔗 Sitio: www.excel.com.mx
🛠 Sector: Professional Services
🔍 Descripcion:N/A
https://images.ransomware.live/victims/59f6ecec97066cb4b86ca0b7bf8ec11a.png
https://www.ransomware.live/id/RXhjZWwgQ29uc3VsdG9yZXNAcWlsaW4=
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: Gammax
📅 Fecha: 2026-07-30T14:28:59+00:00
🏢 Empresa: AguAseo
🔗 Sitio: www.aguaseo.com
🛠 Sector: Energy & Utilities
🔍 Descripcion:AguAseo is a Panamanian organization dedicated to maintaining cleanliness in the province of Colón. It provides solid waste collection and cleaning of...
https://images.ransomware.live/victims/26032e5e8aa91a9fc61e38d75fd3c2b0.png
https://www.ransomware.live/id/QWd1QXNlb0BHYW1tYXg=
👤 Grupo: Gammax
📅 Fecha: 2026-07-30T14:28:59+00:00
🏢 Empresa: AguAseo
🔗 Sitio: www.aguaseo.com
🛠 Sector: Energy & Utilities
🔍 Descripcion:AguAseo is a Panamanian organization dedicated to maintaining cleanliness in the province of Colón. It provides solid waste collection and cleaning of...
https://images.ransomware.live/victims/26032e5e8aa91a9fc61e38d75fd3c2b0.png
https://www.ransomware.live/id/QWd1QXNlb0BHYW1tYXg=
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: qilin
📅 Fecha: 2026-07-31T12:33:26.372739+00:00
🏢 Empresa: The Dcoop
🔗 Sitio: www.dcoop.es
🛠 Sector: Agriculture and Food Production
🔍 Descripcion:N/A
https://images.ransomware.live/victims/1586a70d3b1f072b80da4a81235144c4.png
https://www.ransomware.live/id/VGhlIERjb29wQHFpbGlu
👤 Grupo: qilin
📅 Fecha: 2026-07-31T12:33:26.372739+00:00
🏢 Empresa: The Dcoop
🔗 Sitio: www.dcoop.es
🛠 Sector: Agriculture and Food Production
🔍 Descripcion:N/A
https://images.ransomware.live/victims/1586a70d3b1f072b80da4a81235144c4.png
https://www.ransomware.live/id/VGhlIERjb29wQHFpbGlu
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: thegentlemen
📅 Fecha: 2026-07-31T12:34:50+00:00
🏢 Empresa: Municipalidad de San Luis
🔗 Sitio: munisanluis.gob.pe
🛠 Sector: Government & Defense
🔍 Descripcion:munisanluis.gob.pe zoominfo.com/c/municipalidad-de-san-luis/1322909314 The District Municipality of San Luis is the local government body for the San Luis district in Lima, Peru, dedicated to promoting the integral development and well-being of its residents. Its core mission is to lead, regulate, and provide essential public services while fostering community engagement through cultural, sports, and safety programs. The municipality actively modernizes its operations, offering digital platforms for online procedures and payments to ensure efficient, accessible, and transparent governance
https://www.ransomware.live/id/TXVuaWNpcGFsaWRhZCBkZSBTYW4gTHVpc0B0aGVnZW50bGVtZW4=
👤 Grupo: thegentlemen
📅 Fecha: 2026-07-31T12:34:50+00:00
🏢 Empresa: Municipalidad de San Luis
🔗 Sitio: munisanluis.gob.pe
🛠 Sector: Government & Defense
🔍 Descripcion:munisanluis.gob.pe zoominfo.com/c/municipalidad-de-san-luis/1322909314 The District Municipality of San Luis is the local government body for the San Luis district in Lima, Peru, dedicated to promoting the integral development and well-being of its residents. Its core mission is to lead, regulate, and provide essential public services while fostering community engagement through cultural, sports, and safety programs. The municipality actively modernizes its operations, offering digital platforms for online procedures and payments to ensure efficient, accessible, and transparent governance
https://www.ransomware.live/id/TXVuaWNpcGFsaWRhZCBkZSBTYW4gTHVpc0B0aGVnZW50bGVtZW4=
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: krybit
📅 Fecha: 2026-08-02T13:54:33.774848+00:00
🏢 Empresa: countrymotors.com.mx
🔗 Sitio: countrymotors.com.mx
🛠 Sector: Retail & E-Commerce
🔍 Descripcion:Country Motos S.A. de C.V. (also known as Country Motors or Country Honda) is a Mexican motorcycle dealership and multi-...
https://images.ransomware.live/victims/10dd3299030026b64ba730fa26e2389a.png
https://www.ransomware.live/id/Y291bnRyeW1vdG9ycy5jb20ubXhAa3J5Yml0
👤 Grupo: krybit
📅 Fecha: 2026-08-02T13:54:33.774848+00:00
🏢 Empresa: countrymotors.com.mx
🔗 Sitio: countrymotors.com.mx
🛠 Sector: Retail & E-Commerce
🔍 Descripcion:Country Motos S.A. de C.V. (also known as Country Motors or Country Honda) is a Mexican motorcycle dealership and multi-...
https://images.ransomware.live/victims/10dd3299030026b64ba730fa26e2389a.png
https://www.ransomware.live/id/Y291bnRyeW1vdG9ycy5jb20ubXhAa3J5Yml0
ModernStealer Threat Actor Linked to Government and Defense Data-Leak Claims
https://cybersecuritynews.com/modernstealer-threat-actor/
https://cybersecuritynews.com/modernstealer-threat-actor/
Cyber Security News
ModernStealer Threat Actor Linked to Government and Defense Data-Leak Claims
ModernStealer claims to sell military, government, nuclear, and aerospace data, though the breach claims remain unverified.
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: safepay
📅 Fecha: 2026-08-03T18:27:31.588674+00:00
🏢 Empresa: simonrack.com
🔗 Sitio: simonrack.com
🛠 Sector: Manufacturing
🔍 Descripcion:Headquartered in Alfamén, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's …
https://images.ransomware.live/victims/69a900f07429c3f8da3083a9a296bbf4.png
https://www.ransomware.live/id/c2ltb25yYWNrLmNvbUBzYWZlcGF5
👤 Grupo: safepay
📅 Fecha: 2026-08-03T18:27:31.588674+00:00
🏢 Empresa: simonrack.com
🔗 Sitio: simonrack.com
🛠 Sector: Manufacturing
🔍 Descripcion:Headquartered in Alfamén, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's …
https://images.ransomware.live/victims/69a900f07429c3f8da3083a9a296bbf4.png
https://www.ransomware.live/id/c2ltb25yYWNrLmNvbUBzYWZlcGF5
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: incransom
📅 Fecha: 2026-08-03T23:59:00+00:00
🏢 Empresa: Oleoductos del Valle
🔗 Sitio:
🛠 Sector: Energy & Utilities
🔍 Descripcion:During the analysis of data obtained from Oldelval, we have compiled information covering key aspects of the company's operations. The materials include: 1.HR documentation: full payroll data, bank account details (CBU), employee health insurance records (OSDE, SWISS MEDICAL), as well as severance calculations and compensation agreements. 2.Financial and regulatory reports filed with CNV and BYMA, including documents related to rating agencies (Moody's) and internal shareholder agreements. 3.Tax declarations and reports submitted to AFIP (Sicore, Ganancias, DDJJ IVA). 4.Documents related to tariff policy and SEN interactions, including WACC and TIR calculations used in tariff reviews. 5.Incident reports and environmental documentation, including reports on spills in Catriel and Medanito, as well as Rosen OSSR technical reports on pipeline conditions. 6.Confidentiality agreements with key partners, including Halliburton, Horizon, YPF, Otasa, McKinsey, and KPMG. 7.Internal whistleblower channel materials (Ley 27.401), including internal complaints and compliance reports. 8.Documents related to dividend payments and banking transactions. 9.Personal data of directors, candidates, and key employees, including ID numbers and CVs.
https://images.ransomware.live/victims/62f01f53ff0d2e9189c1519ff95e339d.png
https://www.ransomware.live/id/T2xlb2R1Y3RvcyBkZWwgVmFsbGVAaW5jcmFuc29t
👤 Grupo: incransom
📅 Fecha: 2026-08-03T23:59:00+00:00
🏢 Empresa: Oleoductos del Valle
🔗 Sitio:
🛠 Sector: Energy & Utilities
🔍 Descripcion:During the analysis of data obtained from Oldelval, we have compiled information covering key aspects of the company's operations. The materials include: 1.HR documentation: full payroll data, bank account details (CBU), employee health insurance records (OSDE, SWISS MEDICAL), as well as severance calculations and compensation agreements. 2.Financial and regulatory reports filed with CNV and BYMA, including documents related to rating agencies (Moody's) and internal shareholder agreements. 3.Tax declarations and reports submitted to AFIP (Sicore, Ganancias, DDJJ IVA). 4.Documents related to tariff policy and SEN interactions, including WACC and TIR calculations used in tariff reviews. 5.Incident reports and environmental documentation, including reports on spills in Catriel and Medanito, as well as Rosen OSSR technical reports on pipeline conditions. 6.Confidentiality agreements with key partners, including Halliburton, Horizon, YPF, Otasa, McKinsey, and KPMG. 7.Internal whistleblower channel materials (Ley 27.401), including internal complaints and compliance reports. 8.Documents related to dividend payments and banking transactions. 9.Personal data of directors, candidates, and key employees, including ID numbers and CVs.
https://images.ransomware.live/victims/62f01f53ff0d2e9189c1519ff95e339d.png
https://www.ransomware.live/id/T2xlb2R1Y3RvcyBkZWwgVmFsbGVAaW5jcmFuc29t
Mantente al día con nuestras últimas novedades.
💼 LinkedIn:
https://es.linkedin.com/company/saint-intelligence
𝕏 X / Twitter:
https://x.com/Saint_Intel
Síguenos para no perderte las próximas publicaciones.
💼 LinkedIn:
https://es.linkedin.com/company/saint-intelligence
𝕏 X / Twitter:
https://x.com/Saint_Intel
Síguenos para no perderte las próximas publicaciones.
Vanta Stealer Uses PyArmor to Steal Browser Passwords, Crypto Wallets and Discord Tokens
https://gbhackers.com/vanta-stealer-uses-pyarmor/
https://gbhackers.com/vanta-stealer-uses-pyarmor/
GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Vanta Stealer Uses PyArmor to Steal Browser Passwords, Crypto Wallets and Discord Tokens
Vanta Stealer is a Python‑based, cross‑platform information stealer that uses layered PyArmor obfuscation on top of a PyInstaller‑packed executable to harvest browser passwords.
GRU. Unidad militar 67606
https://www.securityartwork.es/2026/08/06/gru-unidad-militar-67606/
https://www.securityartwork.es/2026/08/06/gru-unidad-militar-67606/
Security Art Work
GRU. Unidad militar 67606 - Security Art Work
Este post fue publicado en inglés hace unos días en LAB52, otro de los blogs de S2GRUPO. El GRU ha desarrollado una compleja estructura PSYOP en los distritos militares rusos. Las unidades 03126 (distrito de Leningrado), 03138 (distrito Central), 03128 (distrito…
China abre una investigación de ciberseguridad sobre los productos de la estadounidense Palo Alto Networks
https://www.europapress.es/economia/noticia-china-abre-investigacion-ciberseguridad-productos-estadounidense-palo-alto-networks-20260806124456.html
https://www.europapress.es/economia/noticia-china-abre-investigacion-ciberseguridad-productos-estadounidense-palo-alto-networks-20260806124456.html
Europa Press
China abre una investigación de ciberseguridad sobre los productos de la estadounidense Palo Alto Networks
La Oficina de Revisión de Ciberseguridad de China ha confirmado este jueves que ha lanzado una revisión...
Dark Web Profile: Mustang Panda
https://socradar.io/blog/dark-web-profile-mustang-panda/
https://socradar.io/blog/dark-web-profile-mustang-panda/
España, en el puesto número 10 en ciberataques a nivel global
https://www.europapress.es/cantabria/noticia-espana-puesto-numero-10-ciberataques-nivel-global-20260805132030.html
https://www.europapress.es/cantabria/noticia-espana-puesto-numero-10-ciberataques-nivel-global-20260805132030.html
Europa Press
España, en el puesto número 10 en ciberataques a nivel global
España se sitúa en el puesto número diez en ciberataques, según el mapa interactivo en tiempo real...
Ransomware Attack Abuses Legitimate Windows Tool to Evade Traditional Containment
https://gbhackers.com/ransomware-abuses-windows-tool/
https://gbhackers.com/ransomware-abuses-windows-tool/
GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Ransomware Attack Abuses Legitimate Windows Tool to Evade Traditional Containment
Microsoft Defender’s new automatic device isolation capability has emerged as a decisive control against modern ransomware intrusions that abuse legitimate Windows binaries.
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: krybit
📅 Fecha: 2026-08-07T02:24:28.670615+00:00
🏢 Empresa: www.hymiasa.com
🔗 Sitio: www.hymiasa.com
🛠 Sector: Other
🔍 Descripcion:HYMIASA (Hules y Mangueras Industriales y Automotrices, S.A. de C.V.) is a Mexican leading company specialized in fluid ...
https://images.ransomware.live/victims/acc93ff067740c7bc43a89f2c1fa54ba.png
https://www.ransomware.live/id/d3d3Lmh5bWlhc2EuY29tQGtyeWJpdA==
👤 Grupo: krybit
📅 Fecha: 2026-08-07T02:24:28.670615+00:00
🏢 Empresa: www.hymiasa.com
🔗 Sitio: www.hymiasa.com
🛠 Sector: Other
🔍 Descripcion:HYMIASA (Hules y Mangueras Industriales y Automotrices, S.A. de C.V.) is a Mexican leading company specialized in fluid ...
https://images.ransomware.live/victims/acc93ff067740c7bc43a89f2c1fa54ba.png
https://www.ransomware.live/id/d3d3Lmh5bWlhc2EuY29tQGtyeWJpdA==
UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions
https://cybersecuritynews.com/unc6671-automates-microsoft-365/
https://cybersecuritynews.com/unc6671-automates-microsoft-365/
Cyber Security News
UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions
UNC6671 uses fake IT helpdesk calls to steal Microsoft 365 and Okta session tokens for corporate data theft and extortion.