ModernStealer Threat Actor Linked to Government and Defense Data-Leak Claims
https://cybersecuritynews.com/modernstealer-threat-actor/
https://cybersecuritynews.com/modernstealer-threat-actor/
Cyber Security News
ModernStealer Threat Actor Linked to Government and Defense Data-Leak Claims
ModernStealer claims to sell military, government, nuclear, and aerospace data, though the breach claims remain unverified.
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: safepay
📅 Fecha: 2026-08-03T18:27:31.588674+00:00
🏢 Empresa: simonrack.com
🔗 Sitio: simonrack.com
🛠 Sector: Manufacturing
🔍 Descripcion:Headquartered in Alfamén, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's …
https://images.ransomware.live/victims/69a900f07429c3f8da3083a9a296bbf4.png
https://www.ransomware.live/id/c2ltb25yYWNrLmNvbUBzYWZlcGF5
👤 Grupo: safepay
📅 Fecha: 2026-08-03T18:27:31.588674+00:00
🏢 Empresa: simonrack.com
🔗 Sitio: simonrack.com
🛠 Sector: Manufacturing
🔍 Descripcion:Headquartered in Alfamén, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's …
https://images.ransomware.live/victims/69a900f07429c3f8da3083a9a296bbf4.png
https://www.ransomware.live/id/c2ltb25yYWNrLmNvbUBzYWZlcGF5
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: incransom
📅 Fecha: 2026-08-03T23:59:00+00:00
🏢 Empresa: Oleoductos del Valle
🔗 Sitio:
🛠 Sector: Energy & Utilities
🔍 Descripcion:During the analysis of data obtained from Oldelval, we have compiled information covering key aspects of the company's operations. The materials include: 1.HR documentation: full payroll data, bank account details (CBU), employee health insurance records (OSDE, SWISS MEDICAL), as well as severance calculations and compensation agreements. 2.Financial and regulatory reports filed with CNV and BYMA, including documents related to rating agencies (Moody's) and internal shareholder agreements. 3.Tax declarations and reports submitted to AFIP (Sicore, Ganancias, DDJJ IVA). 4.Documents related to tariff policy and SEN interactions, including WACC and TIR calculations used in tariff reviews. 5.Incident reports and environmental documentation, including reports on spills in Catriel and Medanito, as well as Rosen OSSR technical reports on pipeline conditions. 6.Confidentiality agreements with key partners, including Halliburton, Horizon, YPF, Otasa, McKinsey, and KPMG. 7.Internal whistleblower channel materials (Ley 27.401), including internal complaints and compliance reports. 8.Documents related to dividend payments and banking transactions. 9.Personal data of directors, candidates, and key employees, including ID numbers and CVs.
https://images.ransomware.live/victims/62f01f53ff0d2e9189c1519ff95e339d.png
https://www.ransomware.live/id/T2xlb2R1Y3RvcyBkZWwgVmFsbGVAaW5jcmFuc29t
👤 Grupo: incransom
📅 Fecha: 2026-08-03T23:59:00+00:00
🏢 Empresa: Oleoductos del Valle
🔗 Sitio:
🛠 Sector: Energy & Utilities
🔍 Descripcion:During the analysis of data obtained from Oldelval, we have compiled information covering key aspects of the company's operations. The materials include: 1.HR documentation: full payroll data, bank account details (CBU), employee health insurance records (OSDE, SWISS MEDICAL), as well as severance calculations and compensation agreements. 2.Financial and regulatory reports filed with CNV and BYMA, including documents related to rating agencies (Moody's) and internal shareholder agreements. 3.Tax declarations and reports submitted to AFIP (Sicore, Ganancias, DDJJ IVA). 4.Documents related to tariff policy and SEN interactions, including WACC and TIR calculations used in tariff reviews. 5.Incident reports and environmental documentation, including reports on spills in Catriel and Medanito, as well as Rosen OSSR technical reports on pipeline conditions. 6.Confidentiality agreements with key partners, including Halliburton, Horizon, YPF, Otasa, McKinsey, and KPMG. 7.Internal whistleblower channel materials (Ley 27.401), including internal complaints and compliance reports. 8.Documents related to dividend payments and banking transactions. 9.Personal data of directors, candidates, and key employees, including ID numbers and CVs.
https://images.ransomware.live/victims/62f01f53ff0d2e9189c1519ff95e339d.png
https://www.ransomware.live/id/T2xlb2R1Y3RvcyBkZWwgVmFsbGVAaW5jcmFuc29t
Mantente al día con nuestras últimas novedades.
💼 LinkedIn:
https://es.linkedin.com/company/saint-intelligence
𝕏 X / Twitter:
https://x.com/Saint_Intel
Síguenos para no perderte las próximas publicaciones.
💼 LinkedIn:
https://es.linkedin.com/company/saint-intelligence
𝕏 X / Twitter:
https://x.com/Saint_Intel
Síguenos para no perderte las próximas publicaciones.
Vanta Stealer Uses PyArmor to Steal Browser Passwords, Crypto Wallets and Discord Tokens
https://gbhackers.com/vanta-stealer-uses-pyarmor/
https://gbhackers.com/vanta-stealer-uses-pyarmor/
GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Vanta Stealer Uses PyArmor to Steal Browser Passwords, Crypto Wallets and Discord Tokens
Vanta Stealer is a Python‑based, cross‑platform information stealer that uses layered PyArmor obfuscation on top of a PyInstaller‑packed executable to harvest browser passwords.
GRU. Unidad militar 67606
https://www.securityartwork.es/2026/08/06/gru-unidad-militar-67606/
https://www.securityartwork.es/2026/08/06/gru-unidad-militar-67606/
Security Art Work
GRU. Unidad militar 67606 - Security Art Work
Este post fue publicado en inglés hace unos días en LAB52, otro de los blogs de S2GRUPO. El GRU ha desarrollado una compleja estructura PSYOP en los distritos militares rusos. Las unidades 03126 (distrito de Leningrado), 03138 (distrito Central), 03128 (distrito…
China abre una investigación de ciberseguridad sobre los productos de la estadounidense Palo Alto Networks
https://www.europapress.es/economia/noticia-china-abre-investigacion-ciberseguridad-productos-estadounidense-palo-alto-networks-20260806124456.html
https://www.europapress.es/economia/noticia-china-abre-investigacion-ciberseguridad-productos-estadounidense-palo-alto-networks-20260806124456.html
Europa Press
China abre una investigación de ciberseguridad sobre los productos de la estadounidense Palo Alto Networks
La Oficina de Revisión de Ciberseguridad de China ha confirmado este jueves que ha lanzado una revisión...
Dark Web Profile: Mustang Panda
https://socradar.io/blog/dark-web-profile-mustang-panda/
https://socradar.io/blog/dark-web-profile-mustang-panda/
España, en el puesto número 10 en ciberataques a nivel global
https://www.europapress.es/cantabria/noticia-espana-puesto-numero-10-ciberataques-nivel-global-20260805132030.html
https://www.europapress.es/cantabria/noticia-espana-puesto-numero-10-ciberataques-nivel-global-20260805132030.html
Europa Press
España, en el puesto número 10 en ciberataques a nivel global
España se sitúa en el puesto número diez en ciberataques, según el mapa interactivo en tiempo real...
Ransomware Attack Abuses Legitimate Windows Tool to Evade Traditional Containment
https://gbhackers.com/ransomware-abuses-windows-tool/
https://gbhackers.com/ransomware-abuses-windows-tool/
GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Ransomware Attack Abuses Legitimate Windows Tool to Evade Traditional Containment
Microsoft Defender’s new automatic device isolation capability has emerged as a decisive control against modern ransomware intrusions that abuse legitimate Windows binaries.
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: krybit
📅 Fecha: 2026-08-07T02:24:28.670615+00:00
🏢 Empresa: www.hymiasa.com
🔗 Sitio: www.hymiasa.com
🛠 Sector: Other
🔍 Descripcion:HYMIASA (Hules y Mangueras Industriales y Automotrices, S.A. de C.V.) is a Mexican leading company specialized in fluid ...
https://images.ransomware.live/victims/acc93ff067740c7bc43a89f2c1fa54ba.png
https://www.ransomware.live/id/d3d3Lmh5bWlhc2EuY29tQGtyeWJpdA==
👤 Grupo: krybit
📅 Fecha: 2026-08-07T02:24:28.670615+00:00
🏢 Empresa: www.hymiasa.com
🔗 Sitio: www.hymiasa.com
🛠 Sector: Other
🔍 Descripcion:HYMIASA (Hules y Mangueras Industriales y Automotrices, S.A. de C.V.) is a Mexican leading company specialized in fluid ...
https://images.ransomware.live/victims/acc93ff067740c7bc43a89f2c1fa54ba.png
https://www.ransomware.live/id/d3d3Lmh5bWlhc2EuY29tQGtyeWJpdA==
UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions
https://cybersecuritynews.com/unc6671-automates-microsoft-365/
https://cybersecuritynews.com/unc6671-automates-microsoft-365/
Cyber Security News
UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions
UNC6671 uses fake IT helpdesk calls to steal Microsoft 365 and Okta session tokens for corporate data theft and extortion.
Storm-1175 Launches StormEncryptor Ransomware Attacks Using N-able Security Flaw
https://gbhackers.com/storm-1175-launches-stormencryptor-ransomware-attacks/
https://gbhackers.com/storm-1175-launches-stormencryptor-ransomware-attacks/
GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Storm-1175 Launches StormEncryptor Ransomware Attacks Using N-able Security Flaw
Microsoft Threat Intelligence has identified a new ransomware campaign attributed to the financially motivated threat actor Storm-1175 that began deploying a previously undocumented ransomware strain, StormEncryptor, on August 2, 2026.
ExfilSquad Targets New Victims, Shares Data via Torrents
https://www.resecurity.com/blog/article/exfilsquad-targets-new-victims-shares-data-via-torrents
https://www.resecurity.com/blog/article/exfilsquad-targets-new-victims-shares-data-via-torrents
Resecurity
Resecurity | ExfilSquad Targets New Victims, Shares Data via Torrents
Ya está disponible el Resumen Semanal de Ciberinteligencia de esta semana, aquí se analizan las noticias más relevantes de esta semana.
https://boletin.saintintelligence.com/
https://boletin.saintintelligence.com/
Saintintelligence
Resumen semanal CiberInteligencia
Semana del 26 Octubre del 2026
TLP:WHITE
NIVEL ANALÍTICO: EJECUTIVO
TLP:WHITE
NIVEL ANALÍTICO: EJECUTIVO
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: qilin
📅 Fecha: 2026-08-09T13:31:15.441038+00:00
🏢 Empresa: Price Shoes
🔗 Sitio: www.priceshoes.com
🛠 Sector: Retail & E-Commerce
🔍 Descripcion:N/A
https://images.ransomware.live/victims/0b71cc4b9eb4d5c8b073a11047730232.png
https://www.ransomware.live/id/UHJpY2UgU2hvZXNAcWlsaW4=
👤 Grupo: qilin
📅 Fecha: 2026-08-09T13:31:15.441038+00:00
🏢 Empresa: Price Shoes
🔗 Sitio: www.priceshoes.com
🛠 Sector: Retail & E-Commerce
🔍 Descripcion:N/A
https://images.ransomware.live/victims/0b71cc4b9eb4d5c8b073a11047730232.png
https://www.ransomware.live/id/UHJpY2UgU2hvZXNAcWlsaW4=
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: qilin
📅 Fecha: 2026-08-09T10:59:33.401021+00:00
🏢 Empresa: Grupo Diestra
🔗 Sitio: www.grupodiestra.com
🛠 Sector: Manufacturing
🔍 Descripcion:N/A
https://images.ransomware.live/victims/291ede8cf30533ba424823a962671f4c.png
https://www.ransomware.live/id/R3J1cG8gRGllc3RyYUBxaWxpbg==
👤 Grupo: qilin
📅 Fecha: 2026-08-09T10:59:33.401021+00:00
🏢 Empresa: Grupo Diestra
🔗 Sitio: www.grupodiestra.com
🛠 Sector: Manufacturing
🔍 Descripcion:N/A
https://images.ransomware.live/victims/291ede8cf30533ba424823a962671f4c.png
https://www.ransomware.live/id/R3J1cG8gRGllc3RyYUBxaWxpbg==
🚨 Nueva Víctima de Ransomware Detectada
👤 Grupo: direwolf
📅 Fecha: 2026-08-10T18:33:43.776563+00:00
🏢 Empresa: Quironsalud
🔗 Sitio: quironsalud.com
🛠 Sector: Healthcare
🔍 Descripcion:Hospitals & Physicians Clinics
https://images.ransomware.live/victims/0e1ba0aae535a8c7403d5a7b69f67281.png
https://www.ransomware.live/id/UXVpcm9uc2FsdWRAZGlyZXdvbGY=
👤 Grupo: direwolf
📅 Fecha: 2026-08-10T18:33:43.776563+00:00
🏢 Empresa: Quironsalud
🔗 Sitio: quironsalud.com
🛠 Sector: Healthcare
🔍 Descripcion:Hospitals & Physicians Clinics
https://images.ransomware.live/victims/0e1ba0aae535a8c7403d5a7b69f67281.png
https://www.ransomware.live/id/UXVpcm9uc2FsdWRAZGlyZXdvbGY=